Question

Your production cluster uses an external etcd topology (etcd runs on dedicated nodes outside the control-plane machines). You need to take an etcd snapshot for backup from one of the etcd nodes using etcdctl v3. The etcd cluster is secured with client certificate authentication. Which command correctly produces the snapshot?

Accepted Answer

ETCDCTL_API=3 etcdctl snapshot save /backup/snap.db --endpoints=https://127.0.0.1:2379 --cacert=/etc/etcd/ca.crt --cert=/etc/etcd/server.crt --key=/etc/etcd/server.key

Answer

ETCDCTL_API=3 etcdctl snapshot save /backup/snap.db --endpoints=http://127.0.0.1:2379

Answer

kubectl exec -n kube-system etcd-master -- etcdctl snapshot save /backup/snap.db

Answer

ETCDCTL_API=2 etcdctl backup --data-dir=/var/lib/etcd --backup-dir=/backup