See below for backing up the Certificate Hub database.

Vacuuming the database

Run this command once before any backup to release orphaned pages from the database and decrease its size.

sudo dbctl.sh vacuum -n <namespace> [--kubectl-cmd <kubectl-cmd>]

Where each parameter has the value described below.

Option

Value

Mandatory

<namespace>

The namespace of the Certificate Hub instance

Always

<kubectl-cmd>

The name of the kubectl client or equivalent command.

When the name of the command is not "kubectl"

For example:

sudo ./dbctl.sh vacuum -n cm --postgres-user postgres

Backing up the database contents

Back up the Certificate Hub database using the tools provided by the DBMS.

Backing up the database encryption key

Run the following command to back up the database encryption key.

Back up the databases regularly to restore your data in case of disaster recovery. 

sudo dbctl.sh backup -n <namespace> [--kubectl-cmd <kubectl-cmd>]

Where each parameter has the value described below.

Option

Value

Mandatory

<namespace>

The namespace of the Certificate Hub instance

Always

<kubectl-cmd>

The name of the kubectl client or equivalent command.

When the name of the command is not "kubectl"

For example:

sudo ./dbctl.sh backup -n cm --postgres-user postgres