mc: <ERROR> Unable to initialize new alias from the provided credentials. The secret key required to complete authentication could not be found. The region must be specified if this is not the home region f │ │ or the tenancy.

Description

MySQL8 backups are not working due to region is not being picked. We have had the workaround as described in https://forums.percona.com/t/percona-operator-xtradb-backup-cron-to-minio-fails-to-add-credentials/8362/12 but as far as i see it was fixed at somepoint.

I am sharing our cr file . Please assist since issue is still present with newer releases.

We are using OCI environment .

pxc image /percona/percona-xtradb-cluster:8.0.25-15.1

backup image /percona/percona-xtradb-cluster-operator:1.10.0-pxc8.0.25-backup

operator version /percona/percona-xtradb-cluster-operator:1.10.0

Environment

None

Attachments

2
  • 27 Oct 2022, 09:24 AM
  • 27 Oct 2022, 09:20 AM

Smart Checklist

Activity

Show:

Slava Sarzhan December 26, 2023 at 9:16 PM

Hi , You can set this env var via the new option https://github.com/percona/percona-xtradb-cluster-operator/blob/main/deploy/cr.yaml#L603 which will be available in the next PXCO release.

Slava Sarzhan March 14, 2023 at 1:55 PM

, we do not have such a possibility now. We will add it in one of the next releases. 

Cagri Biroglu November 4, 2022 at 1:44 PM

Hello Slava ,

It is found that if we add region to the docker file everything works. 

FROM percona/percona-xtradb-cluster-operator:1.10.0-pxc8.0.25-backup ENV MC_REGION=me-jeddah-1 USER 1001

Basically we are searching a way to pass this env variable via operator. So far it has been tried envFromSecret [xtrabackup] section in the config, nothing seems to work.

Could you please advise ? 

 

Slava Sarzhan October 31, 2022 at 1:51 PM

As I can see you use oracle cloud object storage and it is s3 compatible. It can work with our operator but we do not support it officially because it was not tested from our end. We have it in our roadmap and we will include official support in one of the next releases.

P.S. E.g. in our backup pod we use "mc client" to work with storages. In your case the following command return the issue:

mc -C /tmp/mc config host add dest https://frrjzkngligm.compat.objectstorage.me-jeddah-1.oraclecloud.com ACCESS_KEY_ID SECRET_ACCESS_KEY

When you add '--api' key to disable validation you get a new error:

mc -C /tmp/mc --json ls dest/pltf-sdb-sand-data-backups-regional-7cf9277a/mysql-notifications-notifications/mysql-notifications-2022-10-27-11:47:27-full.sst_info 2022-10-27 11:58:52.154 INFO: [SST script[] ++ jq .status 2022-10-27 11:58:52.310 INFO: [SST script[] + [[ -n "error" []] 2022-10-27 11:58:52.310 INFO: [SST script[] + return 1

You can play with mc client to reproduce all these errors and understand the root of the issue (maybe you do not have enough access to storage or mc client can't work correctly at all with oracle storage).

Thanks.

Ivan Pylypenko October 31, 2022 at 12:28 PM

Hi  

We can not reproduce the issue so far.
However, we still have couple of options to verify. Please standby

Done

Details

Assignee

Reporter

Needs QA

Yes

Fix versions

Affects versions

Priority

Smart Checklist

Created October 27, 2022 at 9:22 AM
Updated March 5, 2024 at 5:32 PM
Resolved January 18, 2024 at 2:35 PM