Uploaded image for project: 'OpenShift API for Data Protection'
  1. OpenShift API for Data Protection
  2. OADP-6669

Bucket credentials need to be explicity specified in DPA in case of CloudStorageRef configuration

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • OADP 1.5.3
    • OADP 1.5.1
    • dpa
    • Quality / Stability / Reliability
    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • ToDo
    • Very Likely
    • 0
    • None
    • Unset
    • Unknown
    • None

      Description of problem:

      Created a bucket using CLoudStorage CR, and then used the backupLocations.bucket.cloudStorageRef configuration. DPA reconciliation fails if no credentials section is there in the DPA CR, even if it is already present in CLoudStorage CR

      Version-Release number of selected component (if applicable):

      1.5.1

      How reproducible:

      Always

      Steps to Reproduce:
      1. Create CloudStorage CR
      2. Create DPA referencing the CLoudstorage
      3. Do not provide the credentials in DPA

      Actual results:

      DPA:

      oc get dpa -o yaml
      apiVersion: v1
      items:
      - apiVersion: oadp.openshift.io/v1alpha1
        kind: DataProtectionApplication
        metadata:
          annotations:
            kubectl.kubernetes.io/last-applied-configuration: |
              {"apiVersion":"oadp.openshift.io/v1alpha1","kind":"DataProtectionApplication","metadata":{"annotations":{},"name":"dpa-azure-workload-id-cloudstorage","namespace":"openshift-adp"},"spec":{"backupLocations":[{"bucket":{"cloudStorageRef":{"name":"azure-backup-storage"},"default":true,"prefix":"velero","provider":"azure"},"name":"default"}],"configuration":{"velero":{"defaultPlugins":["azure","openshift","csi"]}},"snapshotLocations":[{"name":"default","velero":{"config":{"resourceGroup":"oadp-127451-rg","subscriptionId":"53b8f551-f0fc-4bea-8cba-6d1fefd54c8a"},"provider":"azure"}}]}}
          creationTimestamp: "2025-09-05T11:27:40Z"
          generation: 9
          name: dpa-azure-workload-id-cloudstorage
          namespace: openshift-adp
          resourceVersion: "79532"
          uid: 12fda709-eff7-48f2-8221-4de2d4ba1723
        spec:
          backupLocations:
          - bucket:
              cloudStorageRef:
                name: azure-backup-storage
              config:
                storageAccount: oadp127451q9ch6
                useAAD: "true"
              default: true
              prefix: velero
            name: default
          configuration:
            nodeAgent:
              enable: true
              uploaderType: kopia
            velero:
              defaultPlugins:
              - azure
              - openshift
              - csi
              disableFsBackup: false
          logFormat: text
        status:
          conditions:
          - lastTransitionTime: "2025-09-05T12:04:31Z"
            message: must provide a valid credential secret
            reason: Error
            status: "False"
            type: Reconciled
      kind: List
      metadata:
        resourceVersion: ""
      
      oc get cloudstorage azure-backup-storage -o yaml
      apiVersion: oadp.openshift.io/v1alpha1
      kind: CloudStorage
      metadata:
        annotations:
          kubectl.kubernetes.io/last-applied-configuration: |
            {"apiVersion":"oadp.openshift.io/v1alpha1","kind":"CloudStorage","metadata":{"annotations":{},"name":"azure-backup-storage","namespace":"openshift-adp"},"spec":{"config":{"storageAccount":"oadp-127451-rg"},"creationPolicy":"CreateIfNotExists","creationSecret":{"key":"azurekey","name":"cloud-credentials-azure"},"name":"oadp127451q9ch6","provider":"azure"}}
        creationTimestamp: "2025-09-05T11:14:49Z"
        finalizers:
        - oadp.openshift.io/bucket-protection
        generation: 2
        name: azure-backup-storage
        namespace: openshift-adp
        resourceVersion: "59258"
        uid: b5374c13-253d-480f-ae91-3c52e8518022
      spec:
        config:
          storageAccount: oadp127451q9ch6
        creationSecret:
          key: azurekey
          name: cloud-credentials-azure
        name: oadp127451q9ch6
        provider: azure
      status:
        lastSyncTimestamp: "2025-09-05T11:17:20Z"
        name: oadp127451q9ch6
      

      Expected results:

      Credentials details should be fetched from CloudStorage CR

      Additional info:

              tkaovila@redhat.com Tiger Kaovilai
              rhn-support-ssingla Sachin Singla
              Sachin Singla Sachin Singla
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: