Control over general Velero Backup/Restore Spec that gets exposed or allow listed via NAB/NAR CRD spec.

shubham-pampattiwar commented 6 months ago

The Velero Backup CR/Restore CR consists of a plethora of Backup/Restore Spec options. It might be desirable to have a control over the spec that is exposed or may be allowlisted for non-admin users.

For instance, Backup Spec IncludedNamespaces should by default be the non-admin user's namespace as this is a scoped backup operation
Another instance is mentioned in the relevant discussion of cluster admins wanting to set a default backup TTL for all the non-admin users
Or maybe the cluster-admins want to enforce that only fs-backups should be used for volumes, so defaultVolumesToFSBackup should be true for all non-admin backups

shubham-pampattiwar commented 6 months ago

Might need some design, current approach of accepting values from cm is added in main deisgn

mateusoliveira43 commented 6 months ago

As mentioned in https://github.com/migtools/oadp-non-admin/issues/35, this also needs to apply to Restore specs

@shubham-pampattiwar can you please update issue title to reflect this (or better to have one issue per object?)

shubham-pampattiwar commented 6 months ago

@mateusoliveira43 Done, updated

migtools / oadp-non-admin

Control over general Velero Backup/Restore Spec that gets exposed or allow listed via NAB/NAR CRD spec. #37