Veeam Kasten K10 9.0.7 — Production Architecture

Veeam Kasten K10 9.0.7 — Production Architecture An architecture diagram generated by Archify. Kasten Operator · browser session · Architecture component Kasten Operator browser session External Entry Route · kasten.ess.eu · outside repo · Architecture component External Entry Route kasten.ess.eu · outside repo PingFederate + PingID · OIDC provider and MFA policy · Architecture component PingFederate + PingID OIDC provider and MFA policy Vault Secrets Operator · OIDC client credentials · Architecture component Vault Secrets Operator OIDC client credentials Access Plane · gateway · frontend · BFF · auth · Kubernetes cluster · production › namespace: kasten-io Access Plane gateway · frontend · BFF · auth API + Control Plane · aggregated APIs · controllers · Kubernetes cluster · production › namespace: kasten-io API + Control Plane aggregated APIs · controllers Execution Plane · executor · jobs · state · Kubernetes cluster · production › namespace: kasten-io Execution Plane executor · jobs · state Protected Namespaces · label: kasten.io/backup=enabled · Kubernetes cluster · production › Protected application namespaces Protected Namespaces label: kasten.io/backup=enabled K10 Internal State · catalog · jobs · service PVCs · Kubernetes cluster · production › namespace: kasten-io K10 Internal State catalog · jobs · service PVCs Data Services · catalog · crypto · repositories · GC · Kubernetes cluster · production › namespace: kasten-io Data Services catalog · crypto · repositories · GC Policy + Location Profile · daily backup/export · retain 3 · Kubernetes cluster · production › namespace: kasten-io Policy + Location Profile daily backup/export · retain 3 Kanister Data Actions · MultiContainerRun · kando · Kubernetes cluster · production › namespace: kasten-io Kanister Data Actions MultiContainerRun · kando PostgreSQL Workloads · StatefulSet or CNPG Cluster · Kubernetes cluster · production › Protected application namespaces PostgreSQL Workloads StatefulSet or CNPG Cluster K10 Observability · Prometheus · logging · metering · Kubernetes cluster · production › namespace: kasten-io K10 Observability Prometheus · logging · metering Export Storage · kasten-pvc · Ceph RBD · 50 GiB · Kubernetes cluster · production Export Storage kasten-pvc · Ceph RBD · 50 GiB HTTPS gateway Service :80 authenticated API requests create and reconcile actions discover · backup · restore OIDC code flow + PKCE client ID + secret catalog and repository operations persist metadata metrics · logs · usage reconcile CRs daily backup + export application-consistent action pg_dump · pg_restore kando push · pull · delete FileStore profile Kubernetes cluster · production namespace: kasten-io Protected application namespaces Legend Frontend Backend Database Cloud Security Message bus External