4.21. OADP Operator 问题

流程

1. 使用 OpenShift 或 Velero 命令行界面(CLI)检索 BSLs 列表：

   1. 使用 OpenShift CLI (oc)检索 BSLs 列表：

      $ oc get backupstoragelocations.velero.io -A

   2. 使用 velero CLI 检索 BSLs 列表：

      $ velero backup-location get -n <oadp_operator_namespace>

2. 使用上一步中的 BSLs 列表，并运行以下命令来检查每个 BSL 的清单中的错误：

   $ oc get backupstoragelocations.velero.io -n <namespace> -o yaml

   结果示例

   apiVersion: v1
   items:
   - apiVersion: velero.io/v1
     kind: BackupStorageLocation
     metadata:
       creationTimestamp: "2023-11-03T19:49:04Z"
       generation: 9703
       name: example-dpa-1
       namespace: openshift-adp-operator
       ownerReferences:
       - apiVersion: oadp.openshift.io/v1alpha1
         blockOwnerDeletion: true
         controller: true
         kind: DataProtectionApplication
         name: example-dpa
         uid: 0beeeaff-0287-4f32-bcb1-2e3c921b6e82
       resourceVersion: "24273698"
       uid: ba37cd15-cf17-4f7d-bf03-8af8655cea83
     spec:
       config:
         enableSharedConfig: "true"
         region: us-west-2
       credential:
         key: credentials
         name: cloud-credentials
       default: true
       objectStorage:
         bucket: example-oadp-operator
         prefix: example
       provider: aws
     status:
       lastValidationTime: "2023-11-10T22:06:46Z"
       message: "BackupStorageLocation \"example-dpa-1\" is unavailable: rpc
         error: code = Unknown desc = WebIdentityErr: failed to retrieve credentials\ncaused
         by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity\n\tstatus
         code: 403, request id: d3f2e099-70a0-467b-997e-ff62345e3b54"
       phase: Unavailable
   kind: List
   metadata:
     resourceVersion: ""