All pages
Powered by GitBook
1 of 3

Loading...

Loading...

Loading...

Adding new storage

This article explains how to set up an Backblaze B2 bucket as storage in GitProtect.

1

Open the Storages section and click Add storage button.

2

The Add storage sidebar will appear—use it to enter the name of your new storage in the Add storage name field (step 1), then click the arrow next to the Storage type section (step 2) to expand the list of available storage types.

3

Scroll down the list and select the Backblaze B2 option.

4

After selecting storage option, the system will display additional sections, including: Authentication data, Region, Bucket name, and Optional description.

5

Copy the key ID and application key (secret access key) from Backblaze B2, paste the key ID to the Access key ID field, and click Select or add secret access key to open the Password Manager menu and add your copied secret key to your bucket.

6

Click the Add new button to add your Backblaze B2 secret access key to GitProtect Password Manager. Enter a password name, then enter the application key in the New password and Confirm password fields. Click Save to finish.

7

Next, select the region where your bucket is created and enter the bucket name (the bucket name is the unique identifier of the container where your objects are stored) in the appropriate field.

8

Ensure that the browsing machine—a device with an active license and the GitProtect worker installed—can access your Backblaze bucket. To use a different device, click Change next to the Browsing machine at the bottom.

9

Review your settings and click the Save button to add the storage to GitProtect. Refresh the page to see the newly added storage on your storages list.

Permissions

Application key restrictions

Only application keys manually created in the Backblaze web UI or via the Backblaze B2 native API can be used to authenticate with the Backblaze S3 compatible API.

Automatically created master application key is not supported in Backblaze S3 compatible API.

If an app key is restricted to a bucket, the listAllBucketNames permission is required for compatibility with SDKs and integrations. This permission can be enabled during creation in the web UI or via the b2_create_key API call.

As a rule, both writeFiles and deleteFiles permissions must be assigned to any key used for deleting files in the S3 compatible API.

Backblaze S3 compatible API does not support unauthenticated ListObject calls on public buckets.


Support for immutable storage

Remember that immutable storage configuration is available only when creating a new bucket — there is no option to enable it for an existing bucket.

Enabling retention and/or versioning for the bucket may result in additional data being stored. It is recommended that the retention period in GitProtect be longer than the one set for the storage. Otherwise, this may lead to storage overload.

If you want to use immutable storage, the following permissions are required:

Required to read Object Lock
s3:GetBucketObjectLockConfiguration
Required to read the versioning configuration
configuration.s3:GetBucketVersioning

It must be added to the Action section, and after the changes, the section should look as shown below:

"Action": [
                    "s3:ListBucket",
                    "s3:GetObject",
                    "s3:PutObject",
                    "s3:DeleteObject",
		    "s3:GetBucketVersioning",
	            "s3:GetBucketObjectLockConfiguration"
               ],

Backblaze B2

Permissions
Adding new storage
Cover
Cover

To get the application key ID (key ID) and application key (secret access key) go to App Keys site on Backblaze platform and create new application key. Learn more about app keys in .

You can verify your bucket region on the Backblaze platform.

Useful links and items

Backblaze official documentation
Immutable Backups: Five Ways to Use Object Lock ImmutabilityBackblaze Blog | Cloud Storage & Cloud Backup
Logo
b2_create_bucketwww.backblaze.com
Logo