Understanding OpenShift API for Data Protection

OpenShift API for Data Protection (OADP) is the official OpenShift operator for backup and disaster recovery of applications.

Think of it as:

“Velero, but fully integrated and supported inside OpenShift”


What OADP actually is

OADP is an OpenShift-native solution that:

  • Uses Velero under the hood
  • Adds OpenShift-specific integration and support
  • Provides a simpler, supported way to:
    • Back up apps
    • Restore apps
    • Protect persistent data

What OADP does

1. Application backups

  • Namespaces
  • Deployments, services, routes
  • ConfigMaps, Secrets

2. Persistent volume protection

  • CSI snapshots (preferred)
  • File-level backups (Restic)

3. Restore workloads

  • Full namespace restore
  • Selective restore (specific resources)

4. Scheduled backups

  • Cron-based automated backups

Key components

DataProtectionApplication (core object)

Defines:

  • Backup storage (S3, etc.)
  • Snapshot locations
  • Plugins

BackupStorageLocation

Where backups are stored (e.g., S3 bucket)


VolumeSnapshotLocation

Where PV snapshots are stored


Backup / Restore / Schedule

Same concepts as Velero:

  • Backup
  • Restore
  • Schedule

How it fits in OpenShift

OCP Cluster
OADP Operator
Velero engine
Object Storage (S3, etc.)
+ Volume snapshots

OADP vs Velero

FeatureOADPVelero
OpenShift support✅ Official❌ Community
InstallationOperatorHubCLI/manual
IntegrationDeep (routes, SCC, etc.)Generic
Lifecycle mgmtOperator-managedManual

👉 In OpenShift, always prefer OADP


What OADP does NOT do

❌ Does NOT back up etcd
❌ Does NOT restore full cluster (alone)
❌ Does NOT replace control-plane backup

You still need:

  • etcd backups for cluster recovery

Typical usage

  • Backup application namespaces
  • Migrate apps between clusters
  • Restore after accidental deletion
  • Disaster recovery (app-level)

Simple example

kind: Schedule
spec:
schedule: "0 2 * * *"
template:
includedNamespaces:
- my-app

This runs a daily backup of your app


Real-world pattern

Production setup:

  • OADP → app backups (hourly/daily)
  • etcd → cluster backup (daily)
  • Storage snapshots → data durability

Final takeaway

  • OADP = OpenShift-native backup solution
  • Built on Velero
  • Handles apps + data, not cluster brain

If you want, I can show:
– how to install OADP step-by-step
– or a real production OADP configuration (ready to use)

Leave a comment