Link to the full talk: https://youtu.be/GbBMX83EqZI https://go.dok.community/slack https://dok.community ABSTRACT OF THE TALK More and more we see stateful workloads pop up in Kubernetes clusters. These workloads generate data that is unique and is ephemeral. During this talk we will discuss the challenges of stateful workloads and how you can successfully protect BIO Working over a decade in IT as a technical expert for Veeam Software. Specializing in backup for the modern hybrid cloud. Passion for scripting and programming. Husband of Lena, father of Lev. KEY TAKE-AWAYS FROM THE TALK Data backup of Kubernetes. DR for Kubernetes

1. Timothy Dewin
Solutions Architect
Nordics/Benelux
@tdewin
Kasten K10
Cloud Native Data Management

2. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Demo Setup
Ubuntu 20.04 lts
K3S single node
OpenEBS ZFS provisioner
- Single node local storage with snapshot support
- https://github.com/openebs/zfs-localpv
Stock Demo (https://github.com/tdewin/stock-demo)
Postgres database (bitnami chart)
Stock Frontend

3. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Complete setup
https://gist.github.com/tdewin/a5954bc21131146ebb1ef0614a73f0a5

4. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Why Backup?
Insurance for the DC
Expected
Broken hardware
Broken software
Unexpected
Rogue personal
Ransomware / External attacks

5. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Kubernetes and the backup gap
Containers exist in a backup blackspot
Often managed by different teams with no focus or experience on
Data Management
Conventional tools that back up virtual machines are not best-suited
to containers

6. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
of Top 10
containers
running in
Kubernetes are
stateful
50%
of monitored
Kubernetes
clusters are
running
StatefulSets
57%
Kubernetes
storage drivers
available for use
today!
70+
2019 Container Usage Report,
Sysdig
Kubernetes CSI Project, 2020
The state of the state

7. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
55% use stateful applications in production, 12% are evaluating them, and 11%
plan to use them in the next 12 months.
2020 CNCF Survey Report 2020
41%
39%
38%
37%
30% 32% 34% 36% 38% 40% 42%
SQL Databases
Message Queues
NoSQL Databases
Batch/Data Streaming
Stateful Application Type
Deployed on Kubernetes
451 Research, Voice of the
Enterprise: DevOps Workloads and
Key Projects 2020
Kubernetes Application Survey,
2018
The state of the state

8. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
"Do Nothing"
Misconception that K8s enough protection
Strengths:
• Low perceived cost
Kubernetes provide high
availability – NOT application
Backup or DR
Considerations:
• High availability is not the same as backup / DR
• Single failure domain (e.g., cluster)
• Cannot recover from non-failure events ( e.g., changes,
deletions, data corruption)
• Difficult to have truly offsite backups – complex
recovery
• Hard to operationalize (e.g., reporting for compliance,
delegated recoveries)

9. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Kasten approach: focus on complete application
Kubernetes resources and persistent state
Perform complete application capture
Perform coordinated operations
Abstract underlying infrastructure
Applications as the operational unit
Ingress Service
Pod
Service Service
Pod Pod
Persistent
VolumeClaim
ConfigMap Secret
Database
Storage

10. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Application
Blueprint
K10 architecture
A high-level overview
Virtual or Physical Infrastructure
Container Orchestration Platform
Lift-and-
Shift App
Cloud
Native App
Lift-and-
Shift App
Application
Blueprint
Cloud
Native App
3
1
Uses Kubernetes API to discover
applications and underlying components
and perform lifecycle operations.
Orchestrator APIs
1
Optional agentless application-centric
hooks can be invoked by easy-to-use
blueprints
Application Framework
3
No proprietary storage layer. Minimal
integration with infrastructure specific
APIs for the following:
Block storage provider - Snapshot
functionality, snapshot and block copy
Object/file provider - S3-compatible object
store or other file storage like NFS
for artifacts
Infrastructure APIs
2
2
3

11. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Storage
Infrastructure
AWS EBS
Azure Blob
S3 Compatible
Data
Management
Platform
Data Services
Amazon RDS
Container
Orchestration
IBM IKS
Distributions
K10 freedom of choice:
Eliminate fragmentation

12. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
Ransomware protection
Why containers are vulnerable
Overpermissioning during install and operations
Lack of privilege separation
Not keeping up to date during ongoing operations
K8s releases and third-party tools
Backup and recovery gaps
Sophisticated Attack Models

13. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
K10: Kubernetes Backup and
Mobility Made Easy
Backup &
Recovery
Disaster
Recovery
Application
Mobility
Built for Kubernetes
Purpose-built for Kubernetes using cloud-native
architectural principles.
Rich Ecosystem
Extensive support across the entire application stack. Select the best
tools or infrastructure.
Ease of Use
State-of-the-art management interface; cloud-native API,
easy install, extensible.
End-to-End Security
Support for RBAC, OIDC, Token Auth, IAM, and industry-standard
encryption
Multi & Hybrid
Cloud
Polyglot
Persistence
Multi-Tenancy
RBAC

14. © 2022 Veeam Software. Confidential information. All rights reserved. All trademarks are the property of their respective owners.
https://kasten.io/resources/
Educate customers – white
papers, case studies, testimonials,
sales@kasten.io
Involve Kasten – Leverage Kasten’s
deep Kubernetes experience, engagement
strategies,
Get started today!
Engage early and transact easily

15. Thank you!