System and method for performing a dedicated backup in a containerized environment

Patent metadata

Field	Value
Publication number	US-12561209-B2
Application number	US-202418599712-A
Country	US
Kind code	B2
Filing date	Mar 8, 2024
Priority date	Mar 8, 2023
Publication date	Feb 24, 2026
Grant date	Feb 24, 2026

Abstract

A process for performing a dedicated backup in a containerized environment is provided. In example aspects, a backup pod performs a backup process for an associated application. The backup pod is customized to contain backup tools that are specific to the backup process for the associated application. The backup pod works in connection with a backup manager that may interface with different backup pods customized for use in conjunction with different containerized applications. In some cases, the backup manager coordinates with each backup pod to provide backup processes for the different containerized applications.

First claim

The invention claimed is:

1 . A method of performing a dedicated backup within a containerized environment, the method comprising:
receiving, at a backup manager in the containerized environment, a request to perform a backup of a first application in the containerized environment, wherein the first application is operating in a first pod in a first namespace in the containerized environment; sending an activation signal from the backup manager to a first backup pod, the first backup pod operating in a second pod in the first namespace and customized to perform a backup process specific to the first application, wherein the first backup pod has at least one backup tool specific to the backup process; receiving, at the backup manager, a first backup file from the first backup pod; and sending the first backup file from the backup manager to a storage system.

2 . The method of claim 1 , wherein the at least one backup tool includes a minimum set of backup tools necessary to perform the backup of the first application.

3 . The method of claim 1 , wherein the storage system is outside of the containerized environment.

4 . The method of claim 1 , further comprising:
receiving, at the backup manager, a request to perform a backup of a second application in the containerized environment, wherein the second application is operating in a first pod in a second namespace in the containerized environment; sending an activation signal from the backup manager to a second backup pod, the second backup pod operating in a second pod in the second namespace and including a second backup tool customized to perform a second backup process that is specific to the second application, wherein the second backup pod has at least one backup tool specific to the second backup process, the at least one backup tool specific to the second backup process differing from the at least one backup tool specific to the first backup process; receiving, at the backup manager, a second backup file from the second backup pod; and sending the second backup file from the backup manager to the storage.

5 . The method of claim 4 , wherein the at least one backup tool specific to the second backup process includes a different set of backup tools compared to the at least one backup tool specific to the backup process specific to the first application.

6 . The method of claim 4 , wherein the at least one backup tool specific to the second backup process includes a minimum set of backup tools necessary to perform the backup of the second application.

7 . The method of claim 4 , wherein the second application is further operating in at least one additional pod in the second namespace.

8 . The method of claim 1 , wherein the backup manager is operating in a namespace separate from the first backup pod and the first application.

9 . The method of claim 1 , wherein the at least one backup tool includes a system for performing a backup of a hardware security module connected to the first application, wherein the hardware security module is maintained outside of the containerized environment.

10 . The method of claim 1 , wherein the at least one backup tool includes one or more utilities configured to transition the first application into a read-only state during the backup process.

11 . The method of claim 1 , wherein the request to perform a backup of a first application in the containerized environment is received at the backup manager through an application programming interface.

12 . The method of claim 1 , wherein the activation signal is sent from the backup manager to the first backup pod using an application programming interface.

13 . A system for performing a dedicated backup in a containerized environment, the system comprising:
a backup manager operating in the containerized environment; a backup pod operating in a first pod in a first namespace in the containerized environment and connected to the backup manager, the backup pod configured to perform a first backup process using at least one backup tool, the at least one backup tool being specific to the backup process, and send a backup file to the backup manager; and a storage system configured to store backup files received from the backup manager.

14 . The system of claim 13 , wherein the at least one backup tool includes a plurality of backup tools.

15 . The system of claim 13 , wherein the backup pod is customized to perform the first backup process for a first application, the first application operating in a second pod in the first namespace in the containerized environment.

16 . The system of claim 13 , further comprising a second backup pod operating in a first pod in a second namespace in the containerized environment and connected to the backup manager, the second backup pod configured to perform a second backup process using at least one backup tool, the at least one backup tool being specific to the second backup process and differing from the at least one backup tool specific to the first backup process, and send a second backup file to the backup manager.

17 . The system of claim 16 , wherein the at least one backup tool specific to the second backup process is customized to perform the second backup process for a second application and is different from the at least one backup tool specific to the first backup process.

18 . The system of claim 13 , wherein the backup manager is operating in a namespace separate from the backup pod.

19 . The system of claim 13 , wherein the at least one backup tool includes a system for performing a backup of a database maintained outside of the containerized environment.

20 . The system of claim 13 , wherein the at least one backup tool includes a system for performing a backup of a hardware security module maintained outside of the containerized environment.

21 . A method of performing a dedicated backup in a containerized environment, the method comprising:
receiving, at a backup manager in the containerized environment, a request to perform a backup of a first application operating in a first application pod in the containerized environment; receiving, at the backup manager, a request to perform a backup of a second application operating in a second application pod in the containerized environment; sending an activation signal from the backup manager to a first backup pod including a plurality of backup tools customized to perform a backup process specific to the first application; sending a second activation signal from the backup manager to a second backup pod including a second plurality of backup tools customized to perform a backup process specific to the second application, the second backup pod being separate from and including a different set of tools as compared to the first backup pod; receiving, at the backup manager, a first backup file from the first backup pod; receiving, at the backup manager, a second backup file from the second backup pod; sending the first backup file from the backup manager to a storage system; and sending the second backup file from the backup manager to the storage system.

22 . The method of claim 21 , wherein the first application pod and the first backup pod reside within a first namespace and the second application pod and the second backup pod reside within a second namespace separate from the first namespace.

23 . The method of claim 21 , wherein the first application pod resides within a firs

Assignees

• Entrust Corp

Inventors

• De Haro Carles
• Mateos David

Classifications

• G06F11/1464

  for networked environments · CPC title

• G06F2201/84

  Using snapshots, i.e. a logical point-in-time copy of the data · CPC title

• G06F11/1451 Primary

  by selection of backup contents · CPC title

• G06F11/1458

  Management of the backup or restore process · CPC title

• G06F11/1461 Primary

  Backup scheduling policy · CPC title