-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
ACM 2.15.0
-
None
-
Quality / Stability / Reliability
-
False
-
-
False
-
-
-
DR Sprint Train 33, SF Train-34
-
Moderate
-
None
Description of problem:
Related to this slack discussion
When using a specific backup name (not "latest"), the credentials restore only creates the -active restore and skips the regular credentials restore.
Expected Behavior:
When restoring managed clusters with credentials, you should restore both regular and activation time credentials ( activation time credentials have the cluster.open-cluster-management.io/backup label set to cluster-activation and they should be restored only when the managed clusters are restored; both regular and activation credentials are backed up under the same backup, credentials backup )
So when restoring managed clusters , all credentials should be restored
Actual Behavior:
Only the activation credentials are restored , under a restore file with this name :
Active credentials restore: restore-acm-creds-20251029181055-acm-credentials-schedule-20251029181055-active. If you open up this velero resource you can see that it has a label selector which restores only cluster-activation resources
To reproduce, run a restore operation and use the backup name instead of the latest backup. For example use
apiVersion: cluster.open-cluster-management.io/v1beta1
kind: Restore
metadata:
name: restore-acm-creds-20251029181055
namespace: open-cluster-management-backup
spec:
cleanupBeforeRestore: CleanupRestored
veleroManagedClustersBackupName: acm-managed-clusters-schedule-20251029181055
veleroCredentialsBackupName: acm-credentials-schedule-20251029181055
veleroResourcesBackupName: acm-resources-schedule-20251029181055
The restore status shows the credentials backup was not restored
phase: Finished
veleroCredentialsRestoreName: restore-acm-creds-20251029181055-acm-credentials-schedule-20251029181055-active<< HERE I should get both -active and regular backup
veleroGenericResourcesRestoreName: restore-acm-creds-20251029181055-acm-resources-generic-schedule-20251029181055
veleroManagedClustersRestoreName: restore-acm-creds-20251029181055-acm-managed-clusters-schedule-20251029181055
veleroResourcesRestoreName: restore-acm-creds-20251029181055-acm-resources-schedule-20251029181055
Version-Release number of selected component (if applicable):
How reproducible:
Always
Steps to Reproduce:
- Restore with the attached sample
- You should see a velero restore for the acm-credentials-schedule-20251029181055, restoring all credentials.
Actual results:
- You get only a velero for acm-credentials-schedule-20251029181055-active. If you open up this velero resource you can see that it has a label selector which restores only cluster-activation resources
Expected results:
- You should see a velero restore for the acm-credentials-schedule-20251029181055, restoring all credentials. The restore velero resource should have no labelSelector
Additional info:
I tested with ACM 2.15 but this is an issue with older releases as well
- is cloned by
-
ACM-26062 [release-2.14] When restoring acm using backup names, credentials backup is not picked up
-
- Testing
-
-
ACM-26063 [release-2.13] When restoring acm using backup names, credentials backup is not picked up
-
- Testing
-
-
ACM-26064 [release-2.12] When restoring acm using backup names, credentials backup is not picked up
-
- Testing
-
-
ACM-26065 [release-2.11] When restoring acm using backup names, credentials backup is not picked up
-
- Testing
-