It is desired to able to install and use OADP as a non-privileged user. To do this, we must permission Velero to the currently installed namespace as well as removing the reliance on restic so there is no requirement to use the privileged SCC.

We will either be modifying upstream velero to support this or customizing our install to support this.

Velero issue: https://github.com/vmware-tanzu/velero/issues/18
Upstream design proposal: https://github.com/vmware-tanzu/velero/pull/4393