PowerProtect Data Manager 19.12 Kubernetes User Guide

OpenShift cluster protection

PowerProtect Data Manager uses the OpenShift API for Data Protection (OADP) operator to set up and install Velero on the OpenShift platform. It is recommended that you check for any existing instances of the OADP operator in the OpenShift cluster that PowerProtect Data Manager have not deployed, and uninstall those instances.

Pulling images from Docker Hub to a local registry

By default, the following images are pulled from Docker Hub at https://hub.docker.com/ after a successful discovery of the Kubernetes cluster asset source, PowerProtect Data Manager:

• dellemc/powerprotect-k8s-controller
• dellemc/powerprotect-cproxy, which is pulled during the first backup
• dellemc/powerprotect-velero-dd
• velero/velero
• vsphereveleroplugin/velero-plugin-for-vsphere (for Kubernetes clusters on vSphere that use VMware CSI)
• vsphereveleroplugin/backup-driver (if using a private registry, this image must be pulled manually to the registry).

If a Kubernetes cluster cannot access these sites due to firewall or other restrictions, you can pull these images to a local registry that the cluster can access. Ensure that you keep the image names and version tags the same in the local registry as they appear in Docker Hub. Also, if pulling the images to a private registry in environments that do not have an Internet connection, verify that PowerProtect Data Manager supports the version of the external image tags. The PowerProtect Data Manager Compatibility Matrix at E-Lab Navigator provides more information.

After pulling the images to a local registry, you must configure PowerProtect Data Manager to use the local registry when creating deployment resources.

If the Kubernetes cluster protected by PowerProtect Data Manager is using an internal registry, perform the following steps:

1. When adding the Kubernetes cluster in the PowerProtect Data Manager UI, expand the Advanced Options and specify the Controller Configuration parameter k8s.docker.registry, Controller Configurations provides more details.
   NOTE If you have upgraded from a previous release of PowerProtect Data Manager and have already specified the internal registry in application.properties file, you can skip this step.

   The section Pull images from Docker Hub as authenticated user if Docker pull limits reached provides information about specifying image pull secrets for the powerprotect-controller and Velero deployment.

You can now add the Kubernetes cluster as an asset source in the PowerProtect Data Manager UI. If you already added the Kubernetes cluster as an asset source, perform these steps and then initiate a manual discovery of the Kubernetes cluster asset source to update the cluster. The configmap and deployment resources in the powerprotect namespace, and the deployment resource in the velero-ppdm namespace, automatically update to use the new images upon successful discovery.