mirror of
https://github.com/vmware-tanzu/velero.git
synced 2026-08-25 16:46:19 +00:00
Mirror the backup-side fix on the restore path. The generic restore exposer creates the intermediate restore PVC in the Velero namespace using the target PVC's StorageClass. For encrypted volumes this fails because ceph-csi looks up the KMS token secret in the PVC's namespace (the Velero namespace), where it does not exist. Add SecretNames/ConfigMapNames to the RestorePVC config. When set, the generic restore exposer copies the named secrets/configmaps from the target namespace to the Velero namespace before creating the restore PVC, and cleans them up in CleanUp(). Reuses the same copy/delete helpers and label as the backup path. Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com>