Skip to main content
Solved

K10 backups prevented by new RKE2 Snapshot Validation Webhook

O

RKE2 v1.26.2  is now bundled with a snapshot validation webhook (https://github.com/rancher/rke2/pull/3944) which prevent K10 backups :

 

            message: 'Failed to create snapshot resource k10-csi-snap-b926xgtp79mbbq6w,
              Namespace xxxxxx: admission webhook
              "rke2-snapshot-validation-webhook.csi.kubernetes.io" denied the
              request: expect resource to be {snapshot.storage.k8s.io v1
              volumesnapshots}, {snapshot.storage.k8s.io v1
              volumesnapshotcontents} or {snapshot.storage.k8s.io v1
              volumesnapshotclasses}'

 

Best answer by Geoff Burke

I could be wrong but if RKE 1.26.2 is what I think it is :) i.e. version 1.26 then I don’t think Kasten have added support yet. They normally need some time for testing and dealing with new things like this, hence the delay in support

 

Check the release notes here https://docs.kasten.io/latest/releasenotes.html

 

cheers

View original
    Did this topic help you find an answer to your question?

    4 comments

    Geoff Burke
    Forum|alt.badge.img+22
    • Geoff Burke
    • Veeam Legend, Veeam Vanguard
    • 1318 comments
    • Answer
    • March 23, 2023

    I could be wrong but if RKE 1.26.2 is what I think it is :) i.e. version 1.26 then I don’t think Kasten have added support yet. They normally need some time for testing and dealing with new things like this, hence the delay in support

     

    Check the release notes here https://docs.kasten.io/latest/releasenotes.html

     

    cheers

    VMCA2024, VMCE2023, VMCE2024-SP,CKA, LFCS, PCA,TARS
    Chris.Childerhose
    O
    2 people like this
    • Chris.Childerhose
      Chris.Childerhose
    • O
      olivierlm
    Geoff Burke
    Forum|alt.badge.img+22
    • Geoff Burke
    • Veeam Legend, Veeam Vanguard
    • 1318 comments
    • March 23, 2023

    There is an effort to try and tighten the controls around snapshots so it makes sense as stated here that the distribution would introduce this. 

     

    https://kubernetes-csi.github.io/docs/snapshot-validation-webhook.html

    VMCA2024, VMCE2023, VMCE2024-SP,CKA, LFCS, PCA,TARS
    Chris.Childerhose
    O
    2 people like this
    • Chris.Childerhose
      Chris.Childerhose
    • O
      olivierlm
    jaiganeshjk
    Forum|alt.badge.img+2
    • jaiganeshjk
    • Experienced User
    • 275 comments
    • March 23, 2023

    You could try removing the older apiVersions for snapshot CRDs from your cluster just keeping the V1.

    K10 supports V1 snapshot CRDs as well.

    Jaiganesh
    Chris.Childerhose
    Geoff Burke
    2 people like this
    • Chris.Childerhose
      Chris.Childerhose
    • Geoff Burke
      Geoff Burke
    O
    • olivierlm
    • Author
    • Not a newbie anymore
    • 1 comment
    • March 23, 2023

    Thanks, I removed the whole Validation Webhook until this get fixed and backups are now OK:

     kubectl delete Validatingwebhookconfigurations/rke2-snapshot-validation-webhook

     

    Chris.Childerhose
    Geoff Burke
    2 people like this
    • Chris.Childerhose
      Chris.Childerhose
    • Geoff Burke
      Geoff Burke

    Comment


    Terms & Conditions