Considerations when protecting nonsnapshot CSI volumes
PowerProtect Data Manager can protect Kubernetes nonsnapshot Container Storage Interface (CSI) storage volumes in cases where the CSI driver does not support snapshots.
The controller configuration key
k8s.ppdm.csi.nonsnapshot.storageclasses has been added to enable protection and movement of data that is stored in CSI solutions with no snapshot capability. This key can be configured under the advanced options when adding the Kubernetes cluster asset source in the
PowerProtect Data Manager UI.
When protecting nonsnapshot CSI volumes, note the following:
The PowerProtect data mover (cProxy) runs in the user namespace being backed up. The backup that is performed is always a full backup of the live volume.
User processes might update certain files and folders during the backup. The File System agent detects any files or folders that were skipped as a result, and these objects are included as part of the next backup. The total number of skipped files is displayed in the
PowerProtect Data Manager UI
Jobs > Protection Jobs window, and the file paths appear in the controller logs, which are pulled into the
/logs/external-components/k8s folder on the
PowerProtect Data Manager host.
When a nonsnapshot CSI volume is backed up as part of a Kubernetes protection policy, the
Details pane of the
PowerProtect Data Manager UI
Jobs > Protection Jobs window lists the names of the
NonSnapshotPVCs.
When restoring a nonsnapshot Container Storage Interface (CSI) storage volume to an alternate storage class, ensure that the target storage class supports the access mode of the backed-up PVC. For example, if the backed-up PVC has an access mode of RWX, the target storage class must support RWX mode.
When running in an OpenShift environment, you might be required to add the
anyuid SCC to either the
ppdm-serviceaccount or the default service account in the target namespace, depending on the security configuration of this namespace. This change is required so that the
PowerProtect Data Manager controller can start the backup cProxy pod as an
admin user. For example,
oc adm policy add-scc-to-user anyuid system:serviceaccount:<user-namespace>:ppdm-serviceaccount
Data is not available for the Topic
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\