Backing up a custom ClusterIssuer configuration

If Maximo® Application Suite core is configured to use a custom ClusterIssuer, then the ClusterIssuer and all of its associated Secret resources must be backed up manually.

About this task

The automated script mascore-backup-restore.sh can detect whether a custom ClusterIssuer is configured. It does not back up the ClusterIssuer instance or any of its associated Secrets. The script can be found in mascore-backup-restore.sh.

Procedure

  1. To determine whether a custom ClusterIssuer is configured for Maximo Application Suite core, examine the Suite resource in the Maximo Application Suite core namespace.
    oc get Suite $MAS_INSTANCE_ID -n mas-{instanceId}-core -o yaml
    If the customer is using a custom ClusterIssuer, the result in the Suite CR includes a .spec.certificateIssuer section, as shown in the following example.
    spec:
      certManagerNamespace: ibm-common-services
      certificateIssuer:
        duration: 8760h0m0s
        name: ivt811x-01-cis-le-prod
        renewBefore: 720h0m0s
  2. Back up the named ClusterIssuer and all of its associated secrets.