PowerProtect Data Manager 19.15 Kubernetes User Guide

The controller configuration key k8s.ppdm.csi.nonsnapshot.storageclasses has been added to enable protection and movement of data that is stored in CSI solutions with no snapshot capability. This key can be configured under the advanced options when adding the Kubernetes cluster asset source in the PowerProtect Data Manager UI.

When protecting nonsnapshot CSI volumes, note the following:

• The PowerProtect data mover (cProxy) runs in the user namespace being backed up. The backup that is performed is always a full backup of the live volume.
• User processes might update certain files and folders during the backup. The File System agent detects any files or folders that were skipped as a result, and these objects are included as part of the next backup. The total number of skipped files is displayed in the PowerProtect Data Manager UI Jobs > Protection Jobs window, and the file paths appear in the controller logs, which are pulled into the /logs/external-components/k8s folder on the PowerProtect Data Manager host.
• When a nonsnapshot CSI volume is backed up as part of a Kubernetes protection policy, the Details pane of the PowerProtect Data Manager UI Jobs > Protection Jobs window lists the names of the NonSnapshotPVCs.
• When restoring a nonsnapshot Container Storage Interface (CSI) storage volume to an alternate storage class, ensure that the target storage class supports the access mode of the backed-up PVC. For example, if the backed-up PVC has an access mode of RWX, the target storage class must support RWX mode.
• When running in an OpenShift environment, you might be required to add the anyuid SCC to either the ppdm-serviceaccount or the default service account in the target namespace, depending on the security configuration of this namespace. This change is required so that the PowerProtect Data Manager controller can start the backup cProxy pod as an admin user. For example, oc adm policy add-scc-to-user anyuid system:serviceaccount:<user-namespace>:ppdm-serviceaccount