环境Rancher v2.13.0Using the Rancher Backup Restore Operator使用 Rancher 备份与恢复操作员情况There is a known bug faced when performing a rollback from Rancher v2.13.0 to Rancher v2.12.3 using BRO (the Backup Restore Operator), which prevents the Restore from completing successfully.在使用 BRO备份与恢复操作符从 Rancher v2.13.0 回滚到 Rancher v2.12.3 时存在已知的 bug导致恢复无法成功完成。The Backup Restore Operator logs look similar to this:备份与恢复操作员的日志大致如下span stylecolor:#000000span stylebackground-color:#ffffffspan stylebackground-color:#efefefcodeERRO[2025/11/17 16:26:58] Error restoring cluster-scoped resources [error restoring cattle-globalrole-user-base of type a>解决方案The bug will be officially fixed in the v2.14.0 version of Rancher as part of improvements tracked by this Github issue. There is, however, a workaround solution to prevent this bug from happening.该漏洞将在 Rancher v2.14.0 版本中正式修复作为本次 GitHub 问题跟踪改进的一部分。不过有一个解决办法可以防止这个 bug 发生。Disabling the Rancher Webhook during a Restore在恢复过程中禁用牧场主的 WebhookThe official documentation on how to perform a rollback can be found here. Essentially, the usual steps will look like this (summarized from the documentation):关于如何进行回滚的官方文档可以在这里找到 。基本上通常的步骤如下从文档中总结In a cluster running Rancher v2.13.0, make sure you have access to a Backup taken for Rancher v2.12.3在运行 Rancher v2.13.0 的集群中确保你能访问 Rancher v2.12.3 的备份Create a BRO Restore CR referencing the desired Backup, wait for it to be completed创建一个 BRO Restore CR引用所需的备份等待备份完成Perform the Helm Rollback as referenced in the docs, usually helm rollback rancher -n cattle-system按照文档中提到的进行 Helm Rollback通常是 Helm Rollback Rancher -n cattle-systemHelm Rollback Rancher -n cattle-systemTo prevent the bug from happening为了防止这个 bug 发生Two extra steps are needed (added as points 2 and 3 below):还需要两个额外步骤作为下文第2点和第3点加进In a cluster running Rancher v2.13.0, make sure you have access to a Backup taken for Rancher v2.12.3在运行 Rancher v2.13.0 的集群中确保你能访问 Rancher v2.12.3 的备份Scale down Rancher to 0 replicas kubectl scale deploy/rancher -n cattle-system --replicas0将 Rancher 缩减至 0 个复制品 kubectl scale deploy/rancher -n cattle-system --replicas0Uninstall the Rancher webhook with helm uninstall helm uninstall rancher-webhook -n cattle-system. Make sure it was uninstalled correctly with helm list -n cattle-system用 helm uninstall helm uninstall rancher-webhook -n cattle-system 卸载 Rancher webhook。确保它已经正确卸载使用 helm list -n cattle-systemCreate a BRO Restore CR (via kubectl, as Rancher is down) referencing the desired Backup, wait for it to be completed创建一个 BRO 还原 CR通过 kubectl因为 Rancher 宕机引用所需的备份等待备份完成Perform the Helm Rollback as referenced in the docs, usually helm rollback rancher -n cattle-system按照文档中提到的进行 Helm Rollback通常是 Helm Rollback Rancher -n cattle-systemHelm Rollback Rancher -n cattle-system原因附加信息Rancher Documentation - Backup, Restore, and Disaster Recovery牧场主文档——备份、恢复与灾难恢复GitHub - backup-restore-operator访问Rancher-K8S解决方案博主 https://blog.csdn.net/lidw2009