Backing up Automation Decision Services

If you use Automation Decision Services, back up the secrets and your PostgreSQL databases.

About this task

The secret <instance>-ads-designer-secret encapsulates the encryptionKeys key, which is used to cipher and decipher secrets in Decision Designer. The secret <instance>-ads-runtime-secret encapsulates the encryptionKeys key, which is used to cipher and decipher secrets in the decision runtime.

Procedure

  1. Make a copy of the secrets. To retrieve the secrets, run the following commands: 
    kubectl --namespace $ADS_RELEASE_NAMESPACE get secret <instance>-ads-designer-secret -o yaml
    kubectl --namespace $ADS_RELEASE_NAMESPACE get secret <instance>-ads-runtime-secret -o yaml
  2. If you previously changed the name of secrets in the custom resource (CR), configure the names with the ads_configuration.decision_designer.admin_secret_name and ads_configuration.decision_runtime.admin_secret_name parameters.
  3. Synchronize your decision services with a remote Git repository to minimize risk of data loss.
  4. If you use external PostgreSQL databases, see the documentation of the PostgreSQL server provider for the backup procedure.

    You must back up the entire database that is referenced in spec.decision_designer.database and spec.decision_runtime.database in the CR.