---
title: OADP Operator issues
---

# OADP Operator issues {#oadp-operator-issues}

Resolve issues with the OpenShift API for Data Protection (OADP) Operator, such as silent failures that prevent proper operation. This helps you restore normal Operator functionality and ensure successful backup and restore operations.

## Resolving silent failure of the OADP Operator {#resolving-oadp-operator-fails-silently-issue_oadp-operator-issues}

Resolve the silent failure issue where the OADP Operator reports a `Running` status but the AWS S3 buckets remain empty due to incorrect cloud credentials permissions. This helps you identify and fix credential permission problems in your backup storage locations.

To fix this issue, retrieve a list of backup storage locations (BSLs) and check the manifest of each BSL for credential issues.

**Procedure**

1. Retrieve a list of BSLs by using either the OpenShift CLI or the OADP CLI:

   1. Retrieve a list of BSLs by using the OpenShift CLI (`oc`):

      ```terminal
      $ oc get backupstoragelocations.velero.io -A
      ```
   2. Retrieve a list of BSLs by using the OADP CLI:

      ```terminal
      $ oc oadp backup-location get -n <oadp_operator_namespace>
      ```
2. Use the list of BSLs from the previous step and run the following command to examine the manifest of each BSL for an error:

   ```terminal
   $ oc get backupstoragelocations.velero.io -n <namespace> -o yaml
   ```

   ```yaml
   apiVersion: v1
   items:
   - apiVersion: velero.io/v1
     kind: BackupStorageLocation
     metadata:
       creationTimestamp: "2023-11-03T19:49:04Z"
       generation: 9703
       name: example-dpa-1
       namespace: openshift-adp-operator
       ownerReferences:
       - apiVersion: oadp.openshift.io/v1alpha1
         blockOwnerDeletion: true
         controller: true
         kind: DataProtectionApplication
         name: example-dpa
         uid: 0beeeaff-0287-4f32-bcb1-2e3c921b6e82
       resourceVersion: "24273698"
       uid: ba37cd15-cf17-4f7d-bf03-8af8655cea83
     spec:
       config:
         enableSharedConfig: "true"
         region: us-west-2
       credential:
         key: credentials
         name: cloud-credentials
       default: true
       objectStorage:
         bucket: example-oadp-operator
         prefix: example
       provider: aws
     status:
       lastValidationTime: "2023-11-10T22:06:46Z"
       message: "BackupStorageLocation \"example-dpa-1\" is unavailable: rpc
         error: code = Unknown desc = WebIdentityErr: failed to retrieve credentials\ncaused
         by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity\n\tstatus
         code: 403, request id: d3f2e099-70a0-467b-997e-ff62345e3b54"
       phase: Unavailable
   kind: List
   metadata:
     resourceVersion: ""
   ```