4.25.6. OADP Operator issues

Procedure

1. Retrieve a list of BSLs by using either the OpenShift or Velero command-line interface (CLI):

   1. Retrieve a list of BSLs by using the OpenShift CLI (oc):

      $ oc get backupstoragelocations.velero.io -A

   2. Retrieve a list of BSLs by using the velero CLI:

      $ velero backup-location get -n <oadp_operator_namespace>

2. Use the list of BSLs from the previous step and run the following command to examine the manifest of each BSL for an error:

   $ oc get backupstoragelocations.velero.io -n <namespace> -o yaml

   apiVersion: v1
   items:
   - apiVersion: velero.io/v1
     kind: BackupStorageLocation
     metadata:
       creationTimestamp: "2023-11-03T19:49:04Z"
       generation: 9703
       name: example-dpa-1
       namespace: openshift-adp-operator
       ownerReferences:
       - apiVersion: oadp.openshift.io/v1alpha1
         blockOwnerDeletion: true
         controller: true
         kind: DataProtectionApplication
         name: example-dpa
         uid: 0beeeaff-0287-4f32-bcb1-2e3c921b6e82
       resourceVersion: "24273698"
       uid: ba37cd15-cf17-4f7d-bf03-8af8655cea83
     spec:
       config:
         enableSharedConfig: "true"
         region: us-west-2
       credential:
         key: credentials
         name: cloud-credentials
       default: true
       objectStorage:
         bucket: example-oadp-operator
         prefix: example
       provider: aws
     status:
       lastValidationTime: "2023-11-10T22:06:46Z"
       message: "BackupStorageLocation \"example-dpa-1\" is unavailable: rpc
         error: code = Unknown desc = WebIdentityErr: failed to retrieve credentials\ncaused
         by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity\n\tstatus
         code: 403, request id: d3f2e099-70a0-467b-997e-ff62345e3b54"
       phase: Unavailable
   kind: List
   metadata:
     resourceVersion: ""