OKE with velero and AWS

[sashalarsoo]

Hey velero team.
I'd like to backup my oke cluster volumes on AWS. Is it possible to combine oke clusters and aws s3 ?
Can i use the volume snapshot location or should i use the fsb ?
I'd like to deploy velero using helm because all my infra runs in terraform. In that case, could i use helm to deploy velero with fsb ?

[kaovilai]

Is it possible to combine oke clusters and aws s3 ?

yes

Can i use the volume snapshot location or should i use the fsb ?

either should work on default aws storage classes. also know CSI method is also available.

could i use helm to deploy velero with fsb ?

yes

[sashalarsoo]

Well i read this on velero doc so i don't understand how snapshot oci volumes beacuse oci provider doesn't exist.

[kaovilai]

just to clarify.. OKE is oracle?

[kaovilai]

If so, velero team do not have direct access or ability to debug them but at the very least FSB should work.

[sashalarsoo]

Yeah OKE is oracle kubernetes. And i'm using oracle storage class.
Thanks, i tested the fsb feature, looks to work well.
But i was wondering if for a namespace i have to restore all the namespace or just could i specify a pod, pv pvc ?

[kaovilai]

FSB will only work on PVCs if the backup also include a pod mounting it.

Ideally you would just specify includedNamespaces where PVC and Pod lives. Velero will auto add relevant PVs

[sashalarsoo]

I see csi plugin is available in oracle : https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengcreatingpersistentvolumeclaim_topic-Provisioning_PVCs_on_BV.htm#contengcreatingpersistentvolumeclaim_topic_Provisioning_PVCs_on_BV_Dynamic_PV_CSI

How could i use it to use the csi method ?
velero install \ --features=EnableCSI \ --plugins=blockvolume.csi.oraclecloud.com \
Could i do like this ?

[kaovilai]

Please follow the website: https://velero.io/docs/v1.15/csi/

No that is not how you do it. --plugins
are for velero plugins, not CSI driver name.

For example, here https://github.com/vmware-tanzu/velero-plugin-for-aws?tab=readme-ov-file#install-and-start-velero

velero install \
    --provider aws \
    --plugins velero/velero-plugin-for-aws:v1.10.0 \
    --bucket $BUCKET \
    --backup-location-config region=$REGION \
    --snapshot-location-config region=$REGION \
    --secret-file ./credentials-velero

[sashalarsoo]

ok thanks understood. I could just delete snapshot location config because oracle doesn't have plugin.
Supposing i choose to use the csi method i just have to create this ressource in my cluster :
apiVersion: snapshot.storage.k8s.io/v1 kind: VolumeSnapshotClass metadata: name: test-snapclass labels: velero.io/csi-volumesnapshot-class: "true" driver: oracle-csi-plugin

And it will work.
However using this method i'm not sure if i must backup pods too like in the fsb method or could i just backup pv and pvcs.

[kaovilai]

For csi, pod shouldn't be necessary. I recommend backup by namespace containing the pvc