Backing up workloads on OADP with OpenShift Container Platform

To back up and restore workloads on ROSA, you can use OADP. You can create a backup of a workload, restore it from the backup, and verify the restoration. You can also clean up the OADP Operator, backup storage, and AWS resources when they are no longer needed.

Performing a backup with OADP and OpenShift Container Platform

The following example hello-world application has no persistent volumes (PVs) attached. Perform a backup by using OpenShift API for Data Protection (OADP) with OpenShift Container Platform.

Either Data Protection Application (DPA) configuration will work.

Procedure

Create a workload to back up by running the following commands:

$ oc create namespace hello-world

$ oc new-app -n hello-world --image=docker.io/openshift/hello-openshift

Expose the route by running the following command:

$ oc expose service/hello-openshift -n hello-world

Check that the application is working by running the following command:
```
$ curl `oc get route/hello-openshift -n hello-world -o jsonpath='{.spec.host}'`
```
You should see an output similar to the following example:
```
Hello OpenShift!
```

Back up the workload by running the following command:

$ cat << EOF | oc create -f -
  apiVersion: velero.io/v1
  kind: Backup
  metadata:
    name: hello-world
    namespace: openshift-adp
  spec:
    includedNamespaces:
    - hello-world
    storageLocation: ${CLUSTER_NAME}-dpa-1
    ttl: 720h0m0s
EOF

Wait until the backup is complete, and then run the following command:

$ watch "oc -n openshift-adp get backup hello-world -o json | jq .status"

You should see an output similar to the following example:

{
  "completionTimestamp": "2022-09-07T22:20:44Z",
  "expiration": "2022-10-07T22:20:22Z",
  "formatVersion": "1.1.0",
  "phase": "Completed",
  "progress": {
    "itemsBackedUp": 58,
    "totalItems": 58
  },
  "startTimestamp": "2022-09-07T22:20:22Z",
  "version": 1
}

Delete the demo workload by running the following command:
```
$ oc delete ns hello-world
```

Restore the workload from the backup by running the following command:

$ cat << EOF | oc create -f -
  apiVersion: velero.io/v1
  kind: Restore
  metadata:
    name: hello-world
    namespace: openshift-adp
  spec:
    backupName: hello-world
EOF

Wait for the Restore to finish by running the following command:

$ watch "oc -n openshift-adp get restore hello-world -o json | jq .status"

You should see an output similar to the following example:

{
  "completionTimestamp": "2022-09-07T22:25:47Z",
  "phase": "Completed",
  "progress": {
    "itemsRestored": 38,
    "totalItems": 38
  },
  "startTimestamp": "2022-09-07T22:25:28Z",
  "warnings": 9
}

Check that the workload is restored by running the following command:

$ oc -n hello-world get pods

You should see an output similar to the following example:

NAME                              READY   STATUS    RESTARTS   AGE
hello-openshift-9f885f7c6-kdjpj   1/1     Running   0          90s

Check the JSONPath by running the following command:
```
$ curl `oc get route/hello-openshift -n hello-world -o jsonpath='{.spec.host}'`
```
You should see an output similar to the following example:
```
Hello OpenShift!
```

Note

For troubleshooting tips, see the troubleshooting documentation.

Cleaning up a cluster after a backup with OADP and ROSA STS

If you need to uninstall the OpenShift API for Data Protection (OADP) Operator together with the backups and the S3 bucket from this example, follow these instructions.

Procedure

Delete the workload by running the following command:
```
$ oc delete ns hello-world
```
Delete the Data Protection Application (DPA) by running the following command:
```
$ oc -n openshift-adp delete dpa ${CLUSTER_NAME}-dpa
```

Delete the cloud storage by running the following command:

$ oc -n openshift-adp delete cloudstorage ${CLUSTER_NAME}-oadp

Warning

If this command hangs, you might need to delete the finalizer by running the following command:

$ oc -n openshift-adp patch cloudstorage ${CLUSTER_NAME}-oadp -p '{"metadata":{"finalizers":null}}' --type=merge

If the Operator is no longer required, remove it by running the following command:
```
$ oc -n openshift-adp delete subscription oadp-operator
```
Remove the namespace from the Operator:
```
$ oc delete ns openshift-adp
```
If the backup and restore resources are no longer required, remove them from the cluster by running the following command:
```
$ oc delete backups.velero.io hello-world
```
To delete backup, restore and remote objects in AWS S3 run the following command:
```
$ velero backup delete hello-world
```
If you no longer need the Custom Resource Definitions (CRD), remove them from the cluster by running the following command:
```
$ for CRD in `oc get crds | grep velero | awk '{print $1}'`; do oc delete crd $CRD; done
```

Delete the AWS S3 bucket by running the following commands:

$ aws s3 rm s3://${CLUSTER_NAME}-oadp --recursive

$ aws s3api delete-bucket --bucket ${CLUSTER_NAME}-oadp

Detach the policy from the role by running the following command:

$ aws iam detach-role-policy --role-name "${ROLE_NAME}"  --policy-arn "${POLICY_ARN}"

Delete the role by running the following command:
```
$ aws iam delete-role --role-name "${ROLE_NAME}"
```