From 9028c34ba0f94abfe8caaf2ff3132f2e0c574540 Mon Sep 17 00:00:00 2001 From: Shubham Pampattiwar Date: Mon, 15 Jun 2026 11:33:04 -0700 Subject: [PATCH] Clean up copied secrets in CSI snapshot exposer CleanUp Add label-based secret cleanup in CleanUp() to delete any secrets that were copied to the Velero namespace for backup PVC provisioning. Uses the velero.io/backup-pvc-secret label to find secrets associated with the DataUpload being cleaned up. Signed-off-by: Shubham Pampattiwar --- pkg/exposer/csi_snapshot.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkg/exposer/csi_snapshot.go b/pkg/exposer/csi_snapshot.go index 147927fff..907fdc885 100644 --- a/pkg/exposer/csi_snapshot.go +++ b/pkg/exposer/csi_snapshot.go @@ -514,6 +514,9 @@ func (e *csiSnapshotExposer) CleanUp(ctx context.Context, ownerObject corev1api. kube.DeletePodIfAny(ctx, e.kubeClient.CoreV1(), backupPodName, ownerObject.Namespace, e.log) kube.DeletePVAndPVCIfAny(ctx, e.kubeClient.CoreV1(), backupPVCName, ownerObject.Namespace, cleanUpTimeout, e.log) + kube.DeleteSecretsWithLabel(ctx, e.kubeClient.CoreV1(), ownerObject.Namespace, + kube.BackupPVCSecretLabel, ownerObject.Name, e.log) + csi.DeleteVolumeSnapshotIfAny(ctx, e.csiSnapshotClient, backupVSName, ownerObject.Namespace, e.log) csi.DeleteVolumeSnapshotIfAny(ctx, e.csiSnapshotClient, vsName, sourceNamespace, e.log) }