x1c in /home/nrb/go/src/github.com/heptio/ark (git) skriss-rotate-restic-key U
% k get podvolumerestore -n heptio-ark -o yaml
apiVersion: v1
items:
- apiVersion: ark.heptio.com/v1
  kind: PodVolumeRestore
  metadata:
    clusterName: ""
    creationTimestamp: 2018-06-21T20:17:34Z
    generateName: nginx-20180621161706-
    generation: 0
    labels:
      ark.heptio.com/pod-uid: 221a2e9c-7590-11e8-b147-42010a960092
      ark.heptio.com/restore-name: nginx-20180621161706
      ark.heptio.com/restore-uid: 11e8a0ea-7590-11e8-b147-42010a960092
    name: nginx-20180621161706-x4tpk
    namespace: heptio-ark
    ownerReferences:
    - apiVersion: ark.heptio.com/v1
      controller: true
      kind: Restore
      name: nginx-20180621161706
      uid: 11e8a0ea-7590-11e8-b147-42010a960092
    resourceVersion: "4071"
    selfLink: /apis/ark.heptio.com/v1/namespaces/heptio-ark/podvolumerestores/nginx-20180621161706-x4tpk
    uid: 22278b34-7590-11e8-b147-42010a960092
  spec:
    pod:
      kind: Pod
      name: nginx-deployment-99997d74d-j2qvh
      namespace: nginx-example
      uid: 221a2e9c-7590-11e8-b147-42010a960092
    repoIdentifier: gs:<REDACTED>_restic:/nginx-example
    snapshotID: 42cc95b1
    volume: nginx-logs
  status:
    message: |-
      error restoring volume: error running restic restore, cmd=restic restore --repo=gs:<REDACTED>_restic:/nginx-example --password-file=/tmp/ark-restic-credentials-nginx-example128382399 --cache-dir=/scratch/.cache/restic 42cc95b1 --target=., stdout=, stderr=Fatal: wrong password or no key found
      : exit status 1
    phase: Failed
kind: List
metadata:
  resourceVersion: ""
  selfLink: ""