OpenShift

New

• The inventory lists the contents of a whole cluster or of a single namespace.
• The openshift protocol backs up and restores the manifests of a whole cluster or of a single namespace.
• The openshift+vm protocol backs up and restores an OpenShift Virtualization virtual machine with its disks.
• The openshift+pvc protocol streams the contents of a PVC through a data mover pod, and restores into a new or an existing PVC.
• The openshift+csi protocol takes a CSI VolumeSnapshot and reads from it, for a consistent capture. Data backed up with it is restored with openshift+pvc.
• A manifest restore leaves out the objects OpenShift recreates on its own, so they are not duplicated or brought back stale: Build and ImageTag objects, build pods and their config maps.

Security

• The data mover pod requests no extra capabilities. OpenShift runs it with a UID from the range of the namespace and grants it only the rights it needs.

Improvements

• An openshift+pvc backup skips the lost+found directory at the root of the volume.
• An openshift+pvc restore does not restore the permissions and timestamps of the root directory of the volume, which the non-root data mover pod cannot change.