Restore Mirantis Kubernetes Engine from a backup

Because the MKE restoration process is complicated, Mirantis strongly recommends contacting Mirantis support for assistance.

Before contacting Mirantis support, perform the following steps:

  1. Download the backup files from remote storage.

  2. Decrypt the backup files:

    openssl enc -d -aes-256-cbc -pbkdf2 -pass file:<KEK> -in <BACKUP>.dek > dek.plain
    
    openssl enc -d -aes-256-cbc -pbkdf2 -pass file:dek.plain -in <BACKUP>.encrypted > backup.tar
    

    Replace <KEK> with the name of the file containing the KeyEncryptionKey value and <BACKUP> with the name of the backup file.

Send the decrypted backup.tar archive to Mirantis support for assistance.

Note

If remote backup storage and encryption are not configured, the backup archive is stored locally in the /srv/backup/ucp directory on one of the MKE manager nodes. In this case, send the local backup archive to Mirantis support for assistance.