PowerProtect Data Manager 19.18 Kubernetes User Guide

OpenShift cluster protection

PowerProtect Data Manager uses the OpenShift API for Data Protection (OADP) operator to set up and install Velero on the OpenShift platform. It is recommended that you check for any existing instances of the OADP operator in the OpenShift cluster that PowerProtect Data Manager have not deployed, and uninstall those instances.

Pulling images from Docker Hub to a local registry

By default, the following images are pulled from Docker Hub after a successful discovery of the Kubernetes cluster asset source, PowerProtect Data Manager:

• dellemc/powerprotect-k8s-controller
• dellemc/powerprotect-cproxy, which is pulled during the first backup
• dellemc/powerprotect-velero-dd
• velero/velero
• vsphereveleroplugin/velero-plugin-for-vsphere (for Kubernetes clusters on vSphere that use VMware CSI)
• vsphereveleroplugin/backup-driver (if using a private registry, this image must be pulled manually to the registry).

You can obtain the tags for the containers from the k8s-image-versions.info file that is available for download in the PowerProtect Data Manager UI:

1. Click , and then select Downloads.
2. In the left pane, select Kubernetes.
3. In the Container Versions box, click Download.

After pulling the images to a local registry, you must configure PowerProtect Data Manager to use the local registry when creating deployment resources.

If the Kubernetes cluster protected by PowerProtect Data Manager is using an internal registry, perform the following steps:

1. When adding the Kubernetes cluster in the PowerProtect Data Manager UI, expand the Advanced Options and specify the Controller Configuration parameter k8s.docker.registry, Controller configurations provides more details.
   NOTE:If you have upgraded from a previous release of PowerProtect Data Manager and have already specified the internal registry in application.properties file, you can skip this step.

   The section Pull images from Docker Hub as authenticated user if Docker pull limits reached provides information about specifying image pull secrets for the powerprotect-controller and Velero deployment.

You can now add the Kubernetes cluster as an asset source in the PowerProtect Data Manager UI. If you already added the Kubernetes cluster as an asset source, perform these steps and then initiate a manual discovery of the Kubernetes cluster asset source to update the cluster. The configmap and deployment resources in the powerprotect namespace, and the deployment resource in the velero-ppdm namespace, automatically update to use the new images upon successful discovery.