• EN
Solved

Not able to add Kasten server into Veeam backup and replication.

T
Userlevel 3

I have a k8s cluster with 3 work nodes and I have Kasten k-10 running under kasten.io namespace. I have different VM for Veeam backups and replications.  When I go to Add Server and select Kasten adn provide the IP and port it work well.  When I add new credential of service account name and its token I see the following error .  A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.

Can you please tell me what is the issue?

Really thanks full. 

icon

Best answer by DChiavari 9 June 2023, 19:16

View original

13 comments

Geoff Burke
Userlevel 7
Badge +22

I believe there is a setting you need to use in the Helm install for it to be able to connect to a VBR server.

Let me take a quick look and I will get back to you.

VMCA2022, VMCE2023, CKA, CKAD, KCNA, LFCS, PCA,TARS
Geoff Burke
Userlevel 7
Badge +22

I don’t see anything in the docs now https://helpcenter.veeam.com/docs/backup/kasten_integration/overview.html?ver=120 

It could be that this setting was only needed when I was using the BETA. Let’s see what the Kasten support folks say.

 

VMCA2022, VMCE2023, CKA, CKAD, KCNA, LFCS, PCA,TARS
FRubens
Userlevel 4
Badge +2

Hello @tauqeerahmad 

Thank you for using K10 community.

Could you please check the links below for the K10 integration to VBR and make sure you have all requirements in place, would be good also to check if the ports required are open on VBR and K10, if you have any firewall in the middle would worth checking it if the connection is allowed.

K10 - VBR version: 

https://helpcenter.veeam.com/docs/backup/kasten_integration/system_requirements.html?ver=120#vbr

Required permissions:

https://helpcenter.veeam.com/docs/backup/kasten_integration/req_permissions.html?ver=120
Used ports:

https://helpcenter.veeam.com/docs/backup/kasten_integration/used_ports.html?ver=120

K10 credentials:

https://helpcenter.veeam.com/docs/backup/kasten_integration/k10_credentials.html?ver=120

 

Hope it helps

FRubens

T
Userlevel 3

Dear Team,

Thanks for you quick response. I have check the points you mentioned above. I have allow the ports and also disable the firewall. I Follow the exact same setup to create a token as mentioned and I also bind the service account and ClusterRole. 

As per version and compatibility my VM is compatible with Veeam. I am using Veeam 12.0.0.1420 and Kasten 5.5.11.

I expose the Kasten service with load balancer and successfully access the dashboard with same token. I am not sure what else to look for. 

Any suggestion please. ? 

Geoff Burke
Userlevel 7
Badge +22

Dear Team,

Thanks for you quick response. I have check the points you mentioned above. I have allow the ports and also disable the firewall. I Follow the exact same setup to create a token as mentioned and I also bind the service account and ClusterRole. 

As per version and compatibility my VM is compatible with Veeam. I am using Veeam 12.0.0.1420 and Kasten 5.5.11.

I expose the Kasten service with load balancer and successfully access the dashboard with same token. I am not sure what else to look for. 

Any suggestion please. ? 

By the way I did have an issue when I was trying to access this with K3S traefik ingress. Again though that was during beta Veeam 12 stage so I need to try it again. Just out of interest which load balancer are you using?

VMCA2022, VMCE2023, CKA, CKAD, KCNA, LFCS, PCA,TARS
T
Userlevel 3

I have k8s on perm so I am using Matallb to expose an IP to access the service. BTW, my service is exposed with port 80 non-SSL and when I change port 80 i see SSL error. Now I am working on it. Just an update so we can find the core reason. 

Geoff Burke
Userlevel 7
Badge +22

I think it requires SSL to work properly. See if that helps

VMCA2022, VMCE2023, CKA, CKAD, KCNA, LFCS, PCA,TARS
DChiavari
Userlevel 6
Badge +7

That’s right, for VBR integration the K10 Dashboard / API endpoint should be exposed via HTTPS, which is the recommended option anyway.

I know of a debug setting that enables integration also over HTTP, but I doubt it’s supported in production environments - I would advice opening a support ticket for guidance.

Danilo Chiavari - Veeam Presales Manager, Italy - www.danilochiavari.com
Geoff Burke
Userlevel 7
Badge +22

Thanks Danilo!

 

That is the same for adding S3 to VBR as a repository it only accepts https (there is a debug key that you can get from support).

 

cheers

VMCA2022, VMCE2023, CKA, CKAD, KCNA, LFCS, PCA,TARS
T
Userlevel 3

Dear Team, 

Thanks for your help. I fix the issue as follow. I create an ingress with cert-manager secret and expose the service. Then I added the ingress IP and host into hosts file manually. I convert the secret into base64 to create a ca.cer and installed as trusted root certificate. Service worked very well through browser with domain. Finally I restarted the Veaam server and successfully manage to add the kasten k10. 

Really Thanks to all who spend time to help me. 

Best Regards, 

Tauqeer. 

 

Geoff Burke
Userlevel 7
Badge +22

If not a secret which ingress did you use nginx? Traefik?

Thanks

VMCA2022, VMCE2023, CKA, CKAD, KCNA, LFCS, PCA,TARS
T
Userlevel 3

I used ha-proxy for internal ingress. 

Geoff Burke
Userlevel 7
Badge +22

Ah ok thanks. I have never used that in Kubernetes. I have used ha-proxy in other areas. Once as a load-balancer and ssl termination in front of a Docker Swarm Cluster with Minio.

VMCA2022, VMCE2023, CKA, CKAD, KCNA, LFCS, PCA,TARS

Comment


Terms & Conditions