Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Cohesity Cloud Scale Technology Manual Deployment Guide for Kubernetes Clusters
  3. Section IV. Maintenance
  4. Patching mechanism for primary, media servers, fluentbit pods, and postgres pods
  5. Patching of primary containers
Cohesity Cloud Scale Technology Manual Deployment Guide for Kubernetes Clusters

Patching of primary containers

This section describes the procedure for patching the following primary containers:

  • Patching particular pod of primary server

  • Patching Init containers for all pods of primary server

  • Patching Sidecar containers for all pods of primary server

Patching particular pod of primary server

To patch the primary's main container with a particular image:

helm upgrade cloudscale cloudscale-11.2.x-xxxxxxx.tgz -n netbackup --reuse-values --set environment.primary.serviceImageTag."primary\.main=<new_img_tag>"

Table: Primary container keywords and examples

Profile name

Main container keyword

Init container keyword

Sidecar container keyword

Primary

primary.main

For example, netbackup/main:<version>-patch

primary.pod-dependency-init

primary.fluentbit

Nbatd

nbatd.main

For example, netbackup/nbatd-main:<version>-patch

nbatd.nbatd-init

For example, netbackup/nbatd-init:<version>-patch

  • nbatd.pbx

    For example, netbackup/pbx:<version>-patch

  • nbatd.fluentbit

  • nbatd.nbhousekeeping

    For example, netbackup/nbhousekeeping:<version>-patch

Mqbroker

nbmqbroker.main

For example, netbackup/mqbroker:<version>-patch

  • nbmqbroker.nbmqbrokerinit

    For example, netbackup/mqbroker-init:<version>-patch

  • nbmqbroker.pod-dependency-init

nbmqbroker.fluentbit

Webservice

nbwsapp.main

For example, netbackup/ws-app:<version>-patch

  • nbwsapp.nbwsinit

    For example, netbackup/ws-init:<version>-patch

  • nbwsapp.pod-dependency-init

  • nbwsapp.secure-comms

    For example, netbackup/vnetd:<version>-patch

  • nbwsapp.nbhousekeeping

    For example, netbackup/nbhousekeeping:<version>-patch

  • nbwsapp.fluentbit

Policyjob

policyjob.main

For example, netbackup/policyjobmgr:<version>-patch

policyjob.pod-dependency-init

  • policyjob.pbx

    For example, netbackup/pbx:<version>-patch

  • policyjob.fluentbit

  • policyjob.secure-comms

    For example, netbackup/vnetd:<version>-patch

  • policyjob.nbhousekeeping

    For example, netbackup/nbhousekeeping:<version>-patch

Policyjobmgr

policyjobmgr.main

For example, netbackup/policyjobmgr:<version>-patch

policyjobmgr.pod-dependency-init

  • policyjobmgr.pbx

    For example, netbackup/pbx:<version>-patch

  • policyjobmgr.secure-comms

    For example, netbackup/vnetd:<version>-patch

  • policyjobmgr.nbhousekeeping

    For example, netbackup/nbhousekeeping:<version>-patch

  • policyjobmgr.fluentbit

Requestrouter

requestrouter.main

For example, netbackup/requestrouter:<version>-patch

requestrouter.pod-dependency-init

 

Bootstrapper

bootstrapper.main

For example, netbackup/main:<version>-patch

bootstrapper.pod-dependency-init

bootstrapper.fluentbit

Log-viewer

log-viewer.main

For example, netbackup/log-viewer:<version>-patch

log-viewer.pod-dependency-init

 

Patching Init containers for all pods of primary server:

Run the following command to patch the pod dependency init container of all pods:

helm upgrade cloudscale cloudscale-11.2.tgz -n netbackup --reuse-values --set environment.primary.serviceImageTag."pod-dependency-init=11.0.1-0100-h"

Patching Sidecar containers for all pods of primary server

Use this when you want to patch a specific Sidecar container for all the profiles (wherever applicable) of the primary server.

Sidecar containers keyword:

  • fluentbit

  • pbx

  • secure-comms

  • nbhousekeeping

To patch the sidecar containers:

helm upgrade --install cloudscale cloudscale-11.2.tgz --reuse-values --set environment.primary.serviceImageTag."primary\.fluentbit=11.2-tagged"

Feedback

Was this page helpful?
Previous

Overview

Next

Patching of media containers

Feedback

Was this page helpful?