add note for backup repository password configuration

Signed-off-by: Shubham Pampattiwar <[email protected]> address PR feedback Signed-off-by: Shubham Pampattiwar <[email protected]> reword the note Signed-off-by: Shubham Pampattiwar <[email protected]> change FS backups to normal backups in the note Signed-off-by: Shubham Pampattiwar <[email protected]>
vmware-tanzu · Sep 6, 2023 · 6260a44 · 6260a44
1 parent 06d9bfa
commit 6260a44
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/site/content/docs/main/file-system-backup.md b/site/content/docs/main/file-system-backup.md
@@ -64,6 +64,11 @@ for namespace2 would be `https://s3-us-west-2.amazonaws.com/bucket/kopia/ns2`.
 There may be additional installation steps depending on the cloud provider plugin you are using. You should refer to the 
 [plugin specific documentation](supported-providers.md) for the must up to date information.  
 
+**Note:** Currently, Velero creates a secret named `velero-repo-credentials` in the velero install namespace, containing a default backup repository password.
+You can update the secret with your own password encoded as base64 prior to the first backup (i.e., FS Backup, data mover) targeting to the backup repository. The value of the key to update is `Data[repository-password]`.
+Backup repository is created during the first execution of backup targeting to it after installing Velero with node agent. If you update the secret password after the first
+backup which created the backup repository, then Velero will not be able to connect with the older backups.
+
 ### Configure Node Agent DaemonSet spec
 
 After installation, some PaaS/CaaS platforms based on Kubernetes also require modifications the node-agent DaemonSet spec.