-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
None
-
Quality / Stability / Reliability
-
3
-
False
-
-
False
-
ToDo
-
-
-
Very Likely
-
0
-
None
-
Unset
-
Unknown
-
None
Description of problem:
VSL backups are failing for azure-sts cloudstorage workflow, asking for AZURE_RESOURCE_GROUP in credentials file, even if it is mentioned in the DPA config for VSL
Version-Release number of selected component (if applicable):
OADP 1.5.1
How reproducible:
Always
Steps to Reproduce:
1. Perform a VSL backup on an application having persistent volumes.
Actual results:
DPA:
oc get dpa -o yaml apiVersion: v1 items: - apiVersion: oadp.openshift.io/v1alpha1 kind: DataProtectionApplication metadata: creationTimestamp: "2025-09-10T13:20:05Z" generation: 2 name: dpa-azure-workload-id-cloudstorage namespace: openshift-adp resourceVersion: "147730" uid: 5daa7198-93dd-4968-a6ea-a24ca60f9807 spec: backupLocations: - bucket: cloudStorageRef: name: oadp12810142srr config: storageAccount: oadp12810142srr useAAD: "true" credential: key: azurekey name: cloud-credentials-azure default: true prefix: velero name: default configuration: velero: defaultPlugins: - azure - openshift disableFsBackup: false logFormat: text snapshotLocations: - name: default velero: config: resourceGroup: oadp-128101-rg subscriptionId: 53b8f551-f0fc-4bea-8cba-6d1fefd54c8a credential: key: azurekey name: cloud-credentials-azure provider: azure status: conditions: - lastTransitionTime: "2025-09-10T13:20:05Z" message: Reconcile complete reason: Complete status: "True" type: Reconciled kind: List metadata: resourceVersion: ""
VSL:
oc get vsl -o yaml apiVersion: v1 items: - apiVersion: velero.io/v1 kind: VolumeSnapshotLocation metadata: creationTimestamp: "2025-09-10T13:20:05Z" generation: 1 labels: app.kubernetes.io/component: vsl app.kubernetes.io/instance: default app.kubernetes.io/managed-by: oadp-operator app.kubernetes.io/name: oadp-operator-velero openshift.io/oadp: "True" name: default namespace: openshift-adp ownerReferences: - apiVersion: oadp.openshift.io/v1alpha1 blockOwnerDeletion: true controller: true kind: DataProtectionApplication name: dpa-azure-workload-id-cloudstorage uid: 5daa7198-93dd-4968-a6ea-a24ca60f9807 resourceVersion: "145278" uid: 14f9072d-945d-47ad-bf8c-72646789f419 spec: config: resourceGroup: oadp-128101-rg subscriptionId: 53b8f551-f0fc-4bea-8cba-6d1fefd54c8a credential: key: azurekey name: cloud-credentials-azure provider: azure status: {} kind: List metadata: resourceVersion: ""
Backup:
velero describe backup test -n openshift-adp --details Name: test Namespace: openshift-adp Labels: velero.io/storage-location=default Annotations: velero.io/resource-timeout=10m0s velero.io/source-cluster-k8s-gitversion=v1.32.7 velero.io/source-cluster-k8s-major-version=1 velero.io/source-cluster-k8s-minor-version=32 Phase: PartiallyFailed (run `velero backup logs test` for more information) Errors: Velero: <none> Cluster: resource: /persistentvolumes name: /pvc-65ba3a60-d098-47b7-9975-9a62c506d84d message: /Error getting volume snapshotter for volume snapshot location error: /rpc error: code = Unknown desc = AZURE_RESOURCE_GROUP is required in credential file resource: /persistentvolumes name: /pvc-6fabf8b2-c2ca-4142-a2e4-6af55fdf969c message: /Error getting volume snapshotter for volume snapshot location error: /rpc error: code = Unknown desc = AZURE_RESOURCE_GROUP is required in credential file Namespaces: <none> Namespaces: Included: mysql Excluded: <none> Resources: Included: * Excluded: <none> Cluster-scoped: auto Label selector: <none> Or label selector: <none> Storage Location: default Velero-Native Snapshot PVs: auto Snapshot Move Data: false Data Mover: velero TTL: 720h0m0s CSISnapshotTimeout: 10m0s ItemOperationTimeout: 1h0m0s Hooks: <none> Backup Format Version: 1.1.0 Started: 2025-09-10 18:57:03 +0530 IST Completed: 2025-09-10 18:57:06 +0530 IST Expiration: 2025-10-10 18:57:03 +0530 IST Total items to be backed up: 46 Items backed up: 46 Resource List: apps/v1/Deployment: - mysql/mysql apps/v1/ReplicaSet: - mysql/mysql-64c9d6466 authorization.openshift.io/v1/RoleBinding: - mysql/admin - mysql/system:deployers - mysql/system:image-builders - mysql/system:image-pullers discovery.k8s.io/v1/EndpointSlice: - mysql/mysql-67jxm rbac.authorization.k8s.io/v1/RoleBinding: - mysql/admin - mysql/system:deployers - mysql/system:image-builders - mysql/system:image-pullers v1/ConfigMap: - mysql/kube-root-ca.crt - mysql/openshift-service-ca.crt v1/Endpoints: - mysql/mysql v1/Event: - mysql/mysql-64c9d6466-vfp5w.1863ee996e9aa2a2 - mysql/mysql-64c9d6466-vfp5w.1863ee9c0be6cb99 - mysql/mysql-64c9d6466-vfp5w.1863ee9c1e04adbf - mysql/mysql-64c9d6466-vfp5w.1863ee9c556496ca - mysql/mysql-64c9d6466-vfp5w.1863ee9c575d33ce - mysql/mysql-64c9d6466-vfp5w.1863ee9e4e17b7dd - mysql/mysql-64c9d6466-vfp5w.1863ee9e524c568d - mysql/mysql-64c9d6466-vfp5w.1863ee9e531111e1 - mysql/mysql-64c9d6466.1863ee98426c528a - mysql/mysql-data.1863ee97e3e2a9ec - mysql/mysql-data.1863ee9843c50456 - mysql/mysql-data.1863ee9843ca252b - mysql/mysql-data.1863ee9924d95dee - mysql/mysql-data1.1863ee980885882c - mysql/mysql-data1.1863ee9844d951d3 - mysql/mysql-data1.1863ee9844df2ad8 - mysql/mysql-data1.1863ee9933abd4d9 - mysql/mysql.1863ee9840909db8 v1/Namespace: - mysql v1/PersistentVolume: - pvc-65ba3a60-d098-47b7-9975-9a62c506d84d - pvc-6fabf8b2-c2ca-4142-a2e4-6af55fdf969c v1/PersistentVolumeClaim: - mysql/mysql-data - mysql/mysql-data1 v1/Pod: - mysql/mysql-64c9d6466-vfp5w v1/Secret: - mysql/builder-dockercfg-glkfb - mysql/default-dockercfg-mxz8j - mysql/deployer-dockercfg-cbfwp - mysql/mysql v1/Service: - mysql/mysql v1/ServiceAccount: - mysql/builder - mysql/default - mysql/deployer Backup Volumes: Velero-Native Snapshots: <none included> CSI Snapshots: <none included> Pod Volume Backups: <none included> HooksAttempted: 0 HooksFailed: 0
Using Cloudstorage secret
oc get secret cloud-credentials-azure -o yaml -n openshift-adp apiVersion: v1 data: azurekey: <key> kind: Secret metadata: creationTimestamp: "2025-09-10T09:08:04Z" labels: dataprotectionapplication.name: dpa-azure-workload-id-cloudstorage oadp.openshift.io/secret-type: sts-credentials openshift.io/oadp: "True" name: cloud-credentials-azure namespace: openshift-adp resourceVersion: "145274" uid: 7114cb3d-8e68-4a0b-8efd-0f7880249328 type: Opaque
Expected results:
Additional info: