CloudCasa for Velero Datasheet
Velero is a popular open-source Kubernetes backup tool that is used by thousands of organizations for protecting Kubernetes workloads. ...
Native Integration with Azure Kubernetes Service
CloudCasa integrates with your Azure accounts to auto-discover your AKS clusters and allows users to set global backup policies across a multi-cluster, multi-account environment. CloudCasa is one of a kind proactive data protection service that also detects and alerts vulnerabilities in Kubernetes clusters and Cloud accounts to improve overall security posture.
Top Five Reasons To Use CloudCasa With Azure
Microsoft Azure Marketplace is an online store for developers and IT pros looking for technical building blocks. It is a premier destination for various software needs – certified and optimized to run on Azure.
Key Solution Benefits
CloudCasa integrates with your Azure accounts to auto-discover your Azure Kubernetes Service clusters and allows users to set global backup policies across a multi-cluster, multi-account environment.
Features and Integrations
Azure-native integration
Restore of Azure files and Persistent Volumes
Data privacy with Azure Private links
Azure marketplace listing
Comprehensive Backup Coverage
Granular Role-based access control (RBAC) & User Groups
Azure-native integration
CloudCasa connects to Azure through Azure Resource Manager (ARM) templates. Benefits to using ARM templates:
- We are not asking users to provide us any type of access or secret keys. It’s always a good practice to not keep/share such sensitive data if it’s not really necessary. That’s the rule we follow at CloudCasa for Azure and other providers we support.
- ARM integration makes to onboarding process a lot easier. In just a few clicks, a user can integrate his Azure subscription with CloudCasa, which will automatically discover all the AKS clusters, resource groups, and other resources.
- ARM integration gives more control to the user. When an ARM template is deployed, CloudCasa will be registered as a Service Provider in the Azure portal. From there, the user can see what permissions are used by CloudCasa.
Restore of Azure files and Persistent Volumes
Simplify recovery processes, including using Azure Files CSI snapshots, to do cross-cluster recovery, AKS restores, and granular restore of resources by type with CloudCasa. Users can use AKS in conjunction with different workload such as PV that is driven by Azure Files and Azure Storage.
Official Azure File CSI Driver supports snapshot creation, but it does not support the restore. It is acknowledged by Microsoft that snapshots can be restored from the Azure portal or using CLI. We can imagine how time-consuming and difficult it would be to restore hundreds or thousands of files. CloudCasa automates this process.
- We automatically detect PVs that use Azure Files and need to be restored.
- For every such PV, we find the right Storage Account and Azure File Share snapshot.
- Finally, we use the official Azure SDK to restore all the files and directories
Data privacy with Azure Private links
CloudCasa utilizes the Azure Private links capability. Private links provide private connectivity between VPCs/vNets and your cloud services without exposing your traffic to the public internet. Private links help simplify your network architecture without compromising on security and scalability.
Azure highlights 5 key reasons for Azure Private Link service:
1. Privately access services on the Azure platform
2. On-premises and peered networks without ExpressRoute Peering
3. Protection against data leakage
4. Global reach and private connection to services across regions
5. Extension to your own services
Azure marketplace listing
Here is the link to CloudCasa on Azure Marketplace.
Comprehensive Backup Coverage
Azure Private S3 Object Store Support in CloudCasa. The following info if required to configure Azure blob storage under Configuration/My Storage: region, resource group name, subscription ID, client ID, client secret, and tenant ID.
CloudCasa supports three different storage types:
– CloudCasa Managed Storage – select the Cloud Provider and Region of your choice.
– Customer Managed Public Storage – for storage reachable through the public Internet. All storage and retention management functions are managed by the CloudCasa service.
– Customer Managed Private Storage – for storage inaccessible to the CloudCasa service. All storage and retention management functions are offloaded to a CloudCasa agent on a customer cluster.
– CloudCasa Managed Storage – select the Cloud Provider and Region of your choice.
– Customer Managed Public Storage – for storage reachable through the public Internet. All storage and retention management functions are managed by the CloudCasa service.
– Customer Managed Private Storage – for storage inaccessible to the CloudCasa service. All storage and retention management functions are offloaded to a CloudCasa agent on a customer cluster.
Granular Role-based access control (RBAC) & User Groups
Roles are now definable by an administrator, and individual users can be assigned multiple roles. User groups can also be defined, and roles can be assigned to groups as well. The permissions a user has are the union of the permissions granted by the roles assigned to them and the permissions granted by the roles assigned to the groups they belong to.
Resources
DevOps Guide for Choosing the Right Kubernetes Data Protection Strategy
As Kubernetes continues to grow in popularity, the shift to microservices is changing the way organizations develop, run and ...
CXO Decision Brief: Kubernetes Data Protection
Microservices are now a common and critical component of enterprise applications. In just a few short years, we have ...
Bob Adair
Sathya Sankaran