From 3ce387331f413d6ac1bd00428e2d732385b6281c Mon Sep 17 00:00:00 2001
From: matthias <matthias@swobblmail.eu>
Date: Thu, 9 Oct 2025 11:56:11 +0200
Subject: [PATCH] Fix Restore with TDE-KEy

---
 pkg/cluster/k8sres.go | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/pkg/cluster/k8sres.go b/pkg/cluster/k8sres.go
index 7fb4d1d3..b2e59f8f 100644
--- a/pkg/cluster/k8sres.go
+++ b/pkg/cluster/k8sres.go
@@ -1695,6 +1695,18 @@ func (c *Cluster) generatePgbackrestRestoreContainer(spec *cpov1.PostgresSpec, r
 			},
 		)
 	}
+	if spec.TDE != nil && spec.TDE.Enable {
+		pgbackrestRestoreEnvVars = append(pgbackrestRestoreEnvVars, v1.EnvVar{Name: "TDE", Value: "true"})
+		pgbackrestRestoreEnvVars = append(pgbackrestRestoreEnvVars, v1.EnvVar{Name: "TDE_KEY", ValueFrom: &v1.EnvVarSource{
+			SecretKeyRef: &v1.SecretKeySelector{
+				LocalObjectReference: v1.LocalObjectReference{
+					Name: c.getTDESecretName(),
+				},
+				Key: "key",
+			},
+		},
+		})
+	}
 
 	return v1.Container{
 		Name:         constants.RestoreContainerName,