Epic Goal

Client Ally Financial requires Backup and Restore in order to continue with their modernization of DataStage from Dev to Prod. They are blocked from going live and deploying to production because they cannot backup and restore. 

Description

Problem Description:
Trying to take the Offline Backup with OADP 1.4 + KOPIA on AWS STS env as per OCP document
cpd-cli oadp backup list | grep sts
q833-sts-1-tenant-offline-b1 PartiallyFailed 4 0 2024-12-06 13:33:49 -0800 PST 364d sr-br-rosa-dpa-1 <none>
 
The backup alone was showing completed

• • PHASE [BACKUP CREATE/COMPLETED] ********************************************
    backup took 32m15.772674805s

backup command completed
post-backup hooks are invoked, but applications may take longer to come up.
please use 'oc get po', 'oc get sts', 'oc get deploy' to check workload status.

• • PHASE [BACKUP CREATE/END] **************************************************

• • INFO [BACKUP CREATE/SUMMARY/START] *****************************************

--------------------------------------------------------------------------------

Scenario: BACKUP CREATE (q833-sts-1-tenant-offline-b1)
Start Time: 2024-12-06 13:22:04.039121743 -0800 PST m=+2.798662948
Completion Time: 2024-12-06 13:54:19.81188798 -0800 PST m=+1938.571429173
Time Elapsed: 32m15.772766225s

--------------------------------------------------------------------------------

• • INFO [BACKUP CREATE/SUMMARY/END] *******************************************
    Backup was not Completed
     
    Release/Build Number: ###
    cpd-cli version: cpd-cli version
    cpd-cli oadp version: cpd-cli oadp version
    case-repo-location url (snapshot#):
    olm-utils-image tag:

Steps to reproduce:

1. Install OADP 1.4 with role ARN
2. Install DPA
   dpa

1. Configure cpd-cli oadp
2. Start the backup
3. Validate the backup

Actual result:
Failed
 
Expected result:
Success
 
Cluster Credentials (if possible):
Cluster is STS enabled
[root@awsmanaged1011 installer-files]# ./rosa list clusters
ID NAME STATE TOPOLOGY
2fc8986iol46d6ghr155dg615j4j6bgt sr-br-rosa ready Classic (STS)
 
Access to the Cluster

Reach out if cluster credentials are necessary

Additional info or Screenshots: (log files, diagnostics, system/env information etc, use the tool mentioned below)

Refer the url and upload the necessary logs
q833-sts-1-tenant-offline-b1.log

@arie-pratama-s was looking into the issue with me and pointed out the problem to be in BackupRepository - the credentials are expiring
status: message: 'error to get repo options: error to get repo credentials: error get
s3 credentials: failed to refresh cached credentials, failed to retrieve credentials,
operation error STS: AssumeRoleWithWebIdentity, https response error StatusCode: 0, RequestID: , request send failed, Post "https://sts/..amazonaws.com/": dial
tcp: lookup sts..amazonaws.com: no such host'
phase: NotReady