Skip to main content
Version: 2.9

TKGS Cluster Prerequisites

Prerequisites​

  • Installation prerequisites should be met

  • Stork installed on all application clusters

  • TKGS cluster with version 1.32.3 and below available over network

  • Portworx or vSphere (non-Portworx) volumes should exist

Prerequisites to install Portworx Backup on TKGS​

Tanzu Kubernetes Grid Service (TKGS) administrators can create deployments, StatefulSets, and DaemonSet (privileged pods) in the kube-system and default namespace, but cannot create in other namespaces. For example, Portworx Backup deployment in the central namespace fails, because Tanzu Kubernetes clusters include the default PodSecurityPolicy.

  1. Create a namespace:

    kubectl create ns <pxb-namespace>

  2. Before you deploy Portworx Backup, for example in the namespace create above, you need to create a role-binding for privileged and restricted workload deployment using the below commands.

    a. If your Kubernetes version is below 1.25, execute the following command :

    kubectl create rolebinding rolebinding-default-privileged-sa-ns_default --namespace=<pxb-namespace> --clusterrole=psp:vmware-system-privileged --group=system:serviceaccounts

    b. If your Kubernetes version is 1.25 and above, run this command:

    kubectl label ns px-backup pod-security.kubernetes.io/enforce=privileged

Related topic: