-
Bug
-
Resolution: Done-Errata
-
Normal
-
OADP 1.5.0
-
Quality / Stability / Reliability
-
3
-
False
-
-
False
-
oadp-operator-bundle-container-1.5.1-32
-
ToDo
-
-
-
Very Likely
-
0
-
None
-
Unset
-
Unknown
-
None
Description of problem:
Currently dpt CR doesn't have ability to skip or add caCert in spec field.
oc get dpt -o yaml
apiVersion: v1
items:
- apiVersion: oadp.openshift.io/v1alpha1
kind: DataProtectionTest
metadata:
creationTimestamp: "2025-06-03T13:29:38Z"
generation: 1
name: dpt-sample
namespace: openshift-adp
resourceVersion: "111448632"
uid: e900bf7c-01b4-41a6-874e-493f94c12b35
spec:
backupLocationName: ts-dpa-1
csiVolumeSnapshotTestConfigs:
- snapshotClassName: ocs-storagecluster-rbdplugin-snapclass
timeout: 90s
volumeSnapshotSource:
persistentVolumeClaimName: mysql-data
persistentVolumeClaimNamespace: ocp-mysql
- snapshotClassName: ocs-storagecluster-rbdplugin-snapclass
timeout: 120s
volumeSnapshotSource:
persistentVolumeClaimName: mysql-data1
persistentVolumeClaimNamespace: ocp-mysql
forceRun: false
uploadSpeedTestConfig:
fileSize: 200MB
timeout: 120s
status:
bucketMetadata:
errorMessage: |-
RequestError: send request failed
caused by: Get "https://s3-openshift-storage.apps.mig-lrtpreserve.rhos-psi.cnv-qe.rhood.us/miglrtpreserved49ww?versioning=": tls: failed to verify certificate: x509: certificate signed by unknown authority
lastTested: "2025-06-03T13:29:38Z"
phase: Complete
snapshotSummary: 2/2 passed
snapshotTests:
- persistentVolumeClaimName: mysql-data1
persistentVolumeClaimNamespace: ocp-mysql
readyDuration: 4s
status: Ready
- persistentVolumeClaimName: mysql-data
persistentVolumeClaimNamespace: ocp-mysql
readyDuration: 4s
status: Ready
uploadTest:
duration: 1.245s
errorMessage: |-
upload failed: RequestError: send request failed
caused by: Put "https://s3-openshift-storage.apps.mig-lrtpreserve.rhos-psi.cnv-qe.rhood.us/miglrtpreserved49ww/dpt-upload-test-1748957378440742477": tls: failed to verify certificate: x509: certificate signed by unknown authority
Version-Release number of selected component (if applicable):
OADP 1.5.0
How reproducible:
Always
Steps to Reproduce:
1. Create a dpa CR with s3url configured with https
2. Create DPT CR
cat dpt-fs.yaml apiVersion: oadp.openshift.io/v1alpha1 kind: DataProtectionTest metadata: name: dpt-sample namespace: openshift-adp spec: backupLocationName: ts-dpa-1 uploadSpeedTestConfig: fileSize: 200MB timeout: 120s
Actual results:
DPT fails when s3Url is secured.
Expected results:
DPT should not fail with error
Additional info:
- links to
-
RHBA-2025:150824
OpenShift API for Data Protection (OADP) 1.5.1 security and bug fix update
