Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-25697

When restoring acm using backup names, credentials backup is not picked up

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • ACM 2.15.0
    • Business Continuity
    • None
    • DR Sprint Train 33, SF Train-34
    • Moderate
    • None

      Description of problem:

      Related to this slack discussion

      https://redhat-internal.slack.com/archives/C0282HW2YHZ/p1761769756893319?thread_ts=1761729892.038489&cid=C0282HW2YHZ

       

       

      When using a specific backup name (not "latest"), the credentials restore only creates the -active restore and skips the regular credentials restore.

      Expected Behavior:

      When restoring managed clusters with credentials, you should restore both regular and activation time credentials ( activation time credentials have the cluster.open-cluster-management.io/backup label set to cluster-activation and they should be restored only when the managed clusters are restored; both regular and activation credentials are backed up under the same backup, credentials backup )

       

      So when restoring managed clusters , all credentials should be restored 

      Actual Behavior:

      Only the activation credentials are restored , under a restore file with this name :

      Active credentials restore: restore-acm-creds-20251029181055-acm-credentials-schedule-20251029181055-active. If you open up this velero resource you can see that it has a label selector which restores only cluster-activation resources

       

       

      To reproduce, run a restore operation and use the backup name instead of the latest backup. For example use 
      apiVersion: cluster.open-cluster-management.io/v1beta1
      kind: Restore
      metadata:
      name: restore-acm-creds-20251029181055
      namespace: open-cluster-management-backup
      spec:
      cleanupBeforeRestore: CleanupRestored
      veleroManagedClustersBackupName: acm-managed-clusters-schedule-20251029181055
      veleroCredentialsBackupName: acm-credentials-schedule-20251029181055
      veleroResourcesBackupName: acm-resources-schedule-20251029181055
       
      The restore status shows the credentials backup was not restored

        phase: Finished

        veleroCredentialsRestoreName: restore-acm-creds-20251029181055-acm-credentials-schedule-20251029181055-active<< HERE I should get both -active and regular backup

        veleroGenericResourcesRestoreName: restore-acm-creds-20251029181055-acm-resources-generic-schedule-20251029181055

        veleroManagedClustersRestoreName: restore-acm-creds-20251029181055-acm-managed-clusters-schedule-20251029181055

        veleroResourcesRestoreName: restore-acm-creds-20251029181055-acm-resources-schedule-20251029181055

      Version-Release number of selected component (if applicable):

      How reproducible:

      Always

      Steps to Reproduce:

      1. Restore with the attached sample
      2. You should see a velero restore for the acm-credentials-schedule-20251029181055, restoring all credentials. 

      Actual results: 

      1. You get only a velero for acm-credentials-schedule-20251029181055-active. If you open up this velero resource you can see that it has a label selector which restores only cluster-activation resources

      Expected results:

      1. You should see a velero restore for the acm-credentials-schedule-20251029181055, restoring all credentials. The restore velero resource should have no labelSelector

       

      Additional info: 

      I tested with ACM 2.15 but this is an issue with older releases as well

       

              saharebrahimi Sahar Ebrahimi
              vbirsan@redhat.com Valentina Birsan
              Thuy Nguyen Thuy Nguyen
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: