// Module included in the following assemblies:
// oadp-features-plugins-known-issues
// * backup_and_restore/application_backup_and_restore/troubleshooting/oadp-operator-issues.adoc
//
:_mod-docs-content-type: PROCEDURE

[id="resolving-oadp-operator-fails-silently-issue_{context}"]
= Resolving silent failure of the OADP Operator

[role="_abstract"]
Resolve the silent failure issue where the {oadp-short} Operator reports a `Running` status but the {aws-short} S3 buckets remain empty due to incorrect cloud credentials permissions. This helps you identify and fix credential permission problems in your backup storage locations.

To fix this issue, retrieve a list of backup storage locations (BSLs) and check the manifest of each BSL for credential issues.

.Procedure

. Retrieve a list of BSLs by using either the OpenShift or Velero command-line interface (CLI):

.. Retrieve a list of BSLs by using the OpenShift CLI (`oc`):
+
[source,terminal]
----
$ oc get backupstoragelocations.velero.io -A
----

.. Retrieve a list of BSLs by using the `velero` CLI:
+
[source,terminal]
----
$ velero backup-location get -n <oadp_operator_namespace>
----

. Use the list of BSLs from the previous step and run the following command to examine the manifest of each BSL for an error:
+
[source,terminal]
----
$ oc get backupstoragelocations.velero.io -n <namespace> -o yaml
----
+
[source, yaml]
----
apiVersion: v1
items:
- apiVersion: velero.io/v1
  kind: BackupStorageLocation
  metadata:
    creationTimestamp: "2023-11-03T19:49:04Z"
    generation: 9703
    name: example-dpa-1
    namespace: openshift-adp-operator
    ownerReferences:
    - apiVersion: oadp.openshift.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: DataProtectionApplication
      name: example-dpa
      uid: 0beeeaff-0287-4f32-bcb1-2e3c921b6e82
    resourceVersion: "24273698"
    uid: ba37cd15-cf17-4f7d-bf03-8af8655cea83
  spec:
    config:
      enableSharedConfig: "true"
      region: us-west-2
    credential:
      key: credentials
      name: cloud-credentials
    default: true
    objectStorage:
      bucket: example-oadp-operator
      prefix: example
    provider: aws
  status:
    lastValidationTime: "2023-11-10T22:06:46Z"
    message: "BackupStorageLocation \"example-dpa-1\" is unavailable: rpc
      error: code = Unknown desc = WebIdentityErr: failed to retrieve credentials\ncaused
      by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity\n\tstatus
      code: 403, request id: d3f2e099-70a0-467b-997e-ff62345e3b54"
    phase: Unavailable
kind: List
metadata:
  resourceVersion: ""
----