@@ -267,7 +267,7 @@ func (se *Reconciler) finalizeSnapshotBackupStep(
 	targetPod *corev1.Pod,
 ) (*ctrl.Result, error) {
 	contextLogger := log.FromContext(ctx).WithValues("podName", targetPod.Name)
-	volumeSnapshotConfig := cluster.Spec.Backup.VolumeSnapshot
+	volumeSnapshotConfig := backup.GetVolumeSnapshotConfiguration(*cluster.Spec.Backup.VolumeSnapshot)
 
 	if res, err := exec.finalize(ctx, cluster, backup, targetPod); res != nil || err != nil {
 		return res, err
 
@@ -361,6 +361,78 @@ var _ = Describe("Volumesnapshot reconciler", func() {
 		Expect(data.Len()).To(Equal(0))
 	})
 
+	It("should honor the Backup's spec.online over the cluster default when finalizing", func(ctx SpecContext) {
+		// the cluster has no explicit online setting, which defaults to true (hot backup)
+		cluster.Spec.Backup.VolumeSnapshot.Online = nil
+		// but this specific Backup requests a cold (offline) backup
+		backup.Spec.Online = ptr.To(false)
+
+		snapshots := volumesnapshotv1.VolumeSnapshotList{
+			Items: []volumesnapshotv1.VolumeSnapshot{
+				{
+					ObjectMeta: metav1.ObjectMeta{
+						Namespace: namespace,
+						Name:      backup.Name,
+						Labels: map[string]string{
+							utils.BackupNameLabelName: backup.Name,
+						},
+						Annotations: map[string]string{
+							"avoid": "nil",
+						},
+					},
+					Status: &volumesnapshotv1.VolumeSnapshotStatus{
+						ReadyToUse:                     ptr.To(false),
+						Error:                          nil,
+						BoundVolumeSnapshotContentName: ptr.To(fmt.Sprintf("%s-content", backup.Name)),
+						CreationTime:                   ptr.To(metav1.Now()),
+					},
+				},
+				{
+					ObjectMeta: metav1.ObjectMeta{
+						Namespace: namespace,
+						Name:      backup.Name + "-wal",
+						Labels: map[string]string{
+							utils.BackupNameLabelName: backup.Name,
+						},
+						Annotations: map[string]string{
+							"avoid": "nil",
+						},
+					},
+					Status: &volumesnapshotv1.VolumeSnapshotStatus{
+						ReadyToUse:                     ptr.To(false),
+						Error:                          nil,
+						BoundVolumeSnapshotContentName: ptr.To(fmt.Sprintf("%s-wal-content", backup.Name)),
+						CreationTime:                   ptr.To(metav1.Now()),
+					},
+				},
+			},
+		}
+
+		cluster.Annotations[utils.FencedInstanceAnnotation] = fmt.Sprintf(`["%s"]`, targetPod.Name)
+
+		mockClient := fake.NewClientBuilder().
+			WithScheme(scheme.BuildWithAllKnownScheme()).
+			WithObjects(cluster, targetPod, backup).
+			WithStatusSubresource(backup).
+			WithLists(&snapshots).
+			Build()
+		fakeRecorder := record.NewFakeRecorder(3)
+
+		executor := NewReconcilerBuilder(mockClient, fakeRecorder).
+			Build()
+
+		result, err := executor.Reconcile(ctx, cluster, backup, targetPod, pvcs)
+		Expect(err).ToNot(HaveOccurred())
+		Expect(result).ToNot(BeNil())
+
+		var latestBackup apiv1.Backup
+		err = mockClient.Get(ctx, types.NamespacedName{Name: backupName, Namespace: namespace}, &latestBackup)
+		Expect(err).ToNot(HaveOccurred())
+
+		Expect(latestBackup.Status.Phase).To(BeEquivalentTo(apiv1.BackupPhaseFinalizing))
+		Expect(latestBackup.Status.GetOnline()).To(BeFalse())
+	})
+
 	It("should properly enrich the backup with labels", func(ctx SpecContext) {
 		mockClient := fake.NewClientBuilder().
 			WithScheme(scheme.BuildWithAllKnownScheme()).