For Kubernetes: Installing and configuring Velero

To protect cluster-scoped resources and namespace-scoped resources in your container workloads, you must install and configure Velero in a dedicated namespace. The suggested default for this namespace is spp-velero.

Before you begin

If you installed an instance of Velero in the cluster for another purpose, you must install another instance of Velero for IBM Spectrum® Protect Plus. Follow the instructions in Installing a second instance of Velero.

About this task

Velero is required to protect cluster-scoped and namespace-scoped resources. If Velero is installed in a cluster in the default namespace, called velero, you can uninstall Velero and follow this procedure to install a new instance.


  1. Download the supported Velero installation package from the following VMware download site:
    To download Velero, run the following command in the kubectl command-line interface:
    curl -fsSL -o velero-version-linux-amd64.tar.gz
    For example,
    curl -fsSL -o velero-v1.5.2-linux-amd64.tar.gz
  2. Extract the .tar file by issuing the following command:
    tar -xvf velero-version-linux-amd64.tar.gz
  3. Change to the directory where the extracted .tar file is located and run the following command:
    ./velero install \
            --use-volume-snapshots=false \
            --no-default-backup-location \
            --no-secret \
            --plugins velero/velero-plugin-for-aws:v1.1.0 -n spp-velero
    When the installation finishes, a message similar to the following message is displayed:
    No secret file was specified, no Secret created.
    No bucket and provider were specified, no default backup storage location created.
    Velero is installed! ⛵ Use 'kubectl logs deployment/velero -n spp-velero' to view the status.

    In this example, the Velero namespace parameter was named spp-velero by changing the veleroNamespace parameter in the baas-values.yaml file.

  4. Ensure that Velero is installed and running by issuing the following command:
    kubectl describe deployment velero -n spp-velero | grep Image
    The following text block is an example of the output that is displayed:
    Image:      velero/velero-plugin-for-aws:v1.1.0
    Image:      velero/velero:v1.5.2

What to do next

If you no longer require Velero, uninstall it by issuing the following commands:
kubectl delete namespace/spp-velero clusterrolebinding/velero
kubectl delete crds -l component=velero  

After you installed Velero and Container Backup Support and before you can protect cluster-scoped and namespaces-scoped resources, you must run an inventory in the IBM Spectrum Protect Plus user interface so that the Velero instance is detected. For instructions, see Detecting Kubernetes resources.

During the inventory operation, the BackupStorageLocation that connects to the BaaS MinIO data mover is created automatically.