Add VM file restore feature integration

This commit integrates the VM file restore feature into OADP operator,
following the same pattern as the non-admin controller integration.

Features:
- Enable/disable VM file restore via DPA.Spec.VMFileRestore.Enable
- Automatic deployment of oadp-vm-file-restore-controller when enabled
- Support for custom resource limits via DPA configuration
- Image override support for all 4 required images:
  * VM file restore controller
  * File access container
  * SSH sidecar
  * FileBrowser sidecar

Changes:
- API: Added VMFileRestore struct to DataProtectionApplication spec
- API: Added 4 image key constants for unsupportedOverrides
- Controller: Created vmfilerestore_controller.go with reconciliation logic
- Validation: Added VM file restore validation requiring kubevirt and openshift plugins
- CRDs: Added VirtualMachineBackupsDiscovery and VirtualMachineFileRestore
- RBAC: Added ClusterRole, binding, and ServiceAccount for controller
- Bundle: Updated CSV with new CRDs, environment variables, and related images
- Documentation: Created comprehensive user guide at docs/config/vm_file_restore.md
- Tests: Added 33 unit test scenarios with full coverage

Prerequisites:
- KubeVirt must be installed in the cluster
- kubevirt-velero-plugin must be configured in defaultPlugins (required)
- openshift-velero-plugin must be configured in defaultPlugins (required)

Implements: migtools/oadp-vm-file-restore#10

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: shubham-pampattiwar

README.md

@@ -97,6 +97,7 @@ Documentation in this repository are considered unofficial and for development p
     5. [Use NooBaa as a Backup Storage Location](docs/config/noobaa/install_oadp_noobaa.md)
     6. [Use Velero --features flag](docs/config/features_flag.md)
     7. [Use Custom Plugin Images for Velero ](docs/config/custom_plugin_images.md)
+    8. [Enable VM File Restore](docs/config/vm_file_restore.md)
 5. Examples
     1. [Sample Apps used in OADP CI](https://github.com/openshift/oadp-operator/tree/oadp-dev/tests/e2e/sample-applications)
     2. [Stateless App Backup/Restore](docs/examples/stateless.md)

api/v1alpha1/dataprotectionapplication_types.go

@@ -73,6 +73,10 @@ const GCPPluginImageKey UnsupportedImageKey = "gcpPluginImageFqin"
 const KubeVirtPluginImageKey UnsupportedImageKey = "kubevirtPluginImageFqin"
 const HypershiftPluginImageKey UnsupportedImageKey = "hypershiftPluginImageFqin"
 const NonAdminControllerImageKey UnsupportedImageKey = "nonAdminControllerImageFqin"
+const VMFileRestoreControllerImageKey UnsupportedImageKey = "vmFileRestoreControllerImageFqin"
+const VMFileRestoreAccessImageKey UnsupportedImageKey = "vmFileRestoreAccessImageFqin"
+const VMFileRestoreSSHImageKey UnsupportedImageKey = "vmFileRestoreSSHImageFqin"
+const VMFileRestoreBrowserImageKey UnsupportedImageKey = "vmFileRestoreBrowserImageFqin"
 const OperatorTypeKey UnsupportedImageKey = "operator-type"
 
 const OperatorTypeMTC = "mtc"
@@ -728,6 +732,18 @@ type NonAdmin struct {
 	BackupSyncPeriod *metav1.Duration `json:"backupSyncPeriod,omitempty"`
 }
 
+// VMFileRestore defines VM file restore feature configuration
+type VMFileRestore struct {
+	// Enable flag to deploy VM file restore controller
+	// By default is disabled
+	// +optional
+	Enable *bool `json:"enable,omitempty"`
+
+	// Resource requirements for the VM file restore controller
+	// +optional
+	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
+}
+
 // DataMover defines the various config for DPA data mover
 type DataMover struct {
 	// enable flag is used to specify whether you want to deploy the volume snapshot mover controller
@@ -840,6 +856,10 @@ type DataProtectionApplicationSpec struct {
 	//   - kubevirtPluginImageFqin
 	//   - hypershiftPluginImageFqin
 	//   - nonAdminControllerImageFqin
+	//   - vmFileRestoreControllerImageFqin
+	//   - vmFileRestoreAccessImageFqin
+	//   - vmFileRestoreSSHImageFqin
+	//   - vmFileRestoreBrowserImageFqin
 	//   - operator-type
 	//   - tech-preview-ack
 	// +optional
@@ -873,6 +893,9 @@ type DataProtectionApplicationSpec struct {
 	// nonAdmin defines the configuration for the DPA to enable backup and restore operations for non-admin users
 	// +optional
 	NonAdmin *NonAdmin `json:"nonAdmin,omitempty"`
+	// vmFileRestore defines the configuration for the DPA to enable VM file restore feature
+	// +optional
+	VMFileRestore *VMFileRestore `json:"vmFileRestore,omitempty"`
 	// The format for log output. Valid values are text, json. (default text)
 	// +kubebuilder:validation:Enum=text;json
 	// +kubebuilder:default=text

api/v1alpha1/zz_generated.deepcopy.go

@@ -688,6 +688,12 @@ spec:
         displayName: Plugins
         path: plugins
       version: v1
+    - kind: VirtualMachineBackupsDiscovery
+      name: virtualmachinebackupsdiscoveries.oadp.openshift.io
+      version: v1alpha1
+    - kind: VirtualMachineFileRestore
+      name: virtualmachinefilerestores.oadp.openshift.io
+      version: v1alpha1
     - description: VolumeSnapshotLocation is a location where Velero stores volume
         snapshots.
       displayName: VolumeSnapshotLocation
@@ -1135,6 +1141,14 @@ spec:
                   value: registry.redhat.io/oadp/oadp-mustgather-rhel8:v1.2
                 - name: RELATED_IMAGE_NON_ADMIN_CONTROLLER
                   value: quay.io/konveyor/oadp-non-admin:latest
+                - name: RELATED_IMAGE_VM_FILE_RESTORE_CONTROLLER
+                  value: quay.io/konveyor/oadp-vm-file-restore:latest
+                - name: RELATED_IMAGE_VM_FILE_RESTORE_ACCESS
+                  value: quay.io/konveyor/oadp-vmfr-access:latest
+                - name: RELATED_IMAGE_VM_FILE_RESTORE_SSH
+                  value: quay.io/konveyor/oadp-vmfr-access-sshd:latest
+                - name: RELATED_IMAGE_VM_FILE_RESTORE_BROWSER
+                  value: quay.io/konveyor/oadp-vmfr-access-filebrowser:latest
                 image: quay.io/konveyor/oadp-operator:latest
                 imagePullPolicy: Always
                 livenessProbe:
@@ -1297,4 +1311,12 @@ spec:
     name: mustgather
   - image: quay.io/konveyor/oadp-non-admin:latest
     name: non-admin-controller
+  - image: quay.io/konveyor/oadp-vm-file-restore:latest
+    name: vm-file-restore-controller
+  - image: quay.io/konveyor/oadp-vmfr-access:latest
+    name: vm-file-restore-access
+  - image: quay.io/konveyor/oadp-vmfr-access-sshd:latest
+    name: vm-file-restore-ssh
+  - image: quay.io/konveyor/oadp-vmfr-access-filebrowser:latest
+    name: vm-file-restore-browser
   version: 99.0.0

bundle/manifests/oadp-operator.clusterserviceversion.yaml

@@ -2669,9 +2669,81 @@ spec:
                       - kubevirtPluginImageFqin
                       - hypershiftPluginImageFqin
                       - nonAdminControllerImageFqin
+                      - vmFileRestoreControllerImageFqin
+                      - vmFileRestoreAccessImageFqin
+                      - vmFileRestoreSSHImageFqin
+                      - vmFileRestoreBrowserImageFqin
                       - operator-type
                       - tech-preview-ack
                   type: object
+                vmFileRestore:
+                  description: vmFileRestore defines the configuration for the DPA to enable VM file restore feature
+                  properties:
+                    enable:
+                      description: |-
+                        Enable flag to deploy VM file restore controller
+                        By default is disabled
+                      type: boolean
+                    resources:
+                      description: Resource requirements for the VM file restore controller
+                      properties:
+                        claims:
+                          description: |-
+                            Claims lists the names of resources, defined in spec.resourceClaims,
+                            that are used by this container.
+
+                            This is an alpha field and requires enabling the
+                            DynamicResourceAllocation feature gate.
+
+                            This field is immutable. It can only be set for containers.
+                          items:
+                            description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+                            properties:
+                              name:
+                                description: |-
+                                  Name must match the name of one entry in pod.spec.resourceClaims of
+                                  the Pod where this field is used. It makes that resource available
+                                  inside a container.
+                                type: string
+                              request:
+                                description: |-
+                                  Request is the name chosen for a request in the referenced claim.
+                                  If empty, everything from the claim is made available, otherwise
+                                  only the result of this request.
+                                type: string
+                            required:
+                              - name
+                            type: object
+                          type: array
+                          x-kubernetes-list-map-keys:
+                            - name
+                          x-kubernetes-list-type: map
+                        limits:
+                          additionalProperties:
+                            anyOf:
+                              - type: integer
+                              - type: string
+                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                            x-kubernetes-int-or-string: true
+                          description: |-
+                            Limits describes the maximum amount of compute resources allowed.
+                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+                          type: object
+                        requests:
+                          additionalProperties:
+                            anyOf:
+                              - type: integer
+                              - type: string
+                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                            x-kubernetes-int-or-string: true
+                          description: |-
+                            Requests describes the minimum amount of compute resources required.
+                            If Requests is omitted for a container, it defaults to Limits if that is explicitly specified,
+                            otherwise to an implementation-defined value. Requests cannot exceed Limits.
+                            More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
+                          type: object
+                      type: object
+                  type: object
               required:
                 - configuration
               type: object