Backup not working with Service accounts using Web identity Tokens

[Joshuaariolu]

I have noticed that the backup functionality does not work when I use a service account with web identity token. I get the error message below.

ERROR (OverseerThreadFactory-54-thread-3) [c:Collection s: r: x: t:] o.a.s.c.a.c.CollectionHandlingUtils Collection Collection, operation backup failed => org.apache.solr.s3.S3Exception: An AmazonServiceException was thrown! [serviceName=S3] [awsRequestId=56HQCK517V8WD2EE] [httpStatus=403] [s3ErrorCode=null] [message=null]
I also get a 400 error on some occassions.

I am currently running on solr version 9.8.1 and solr operator v0.8.1

I saw a similar thread on #475 and apparently it has been resolved on versions 8.11 and higher.

Is there any part of the back up process I may be missing when working with Web Identity token?

[Joshuaariolu]

Required parameters parsed on values.yaml

solrModules: ["scripting","s3-repository"]

serviceAccountName: "solr-svc-acct"

backupRepositories:
- name: "s3-backups-1"
s3:
region: "us-east-1"
bucket: "dev-main-ue1"

Backup definition
apiVersion: solr.apache.org/v1beta1
kind: SolrBackup
metadata:
name: local-backup
spec:
repositoryName: "s3-backups-1"
solrCloud: solr
collections:
- Collection
recurrence: # Store one backup daily, and keep a week at a time.
schedule: "@every 5m"
maxSaved: 7

[elangelo]

Make sure to whitelist the path of the token.
-Dsolr.allowPaths=/var/run/secrets/eks.amazonaws.com/serviceaccount/token

#775

[Joshuaariolu]

Thanks for the response @elangelo
Please where did you define that in your values.yaml?

[elangelo]

I'm not using the helm chart but i think solrOptions.javaOpts should be set.
something like --set solrOptions.javaOpts="-Dsolr.allowPaths=/var/run/secrets/eks.amazonaws.com/serviceaccount/token"
if you want to directly put it in the helm install command

[Joshuaariolu]

Thanks alot @elangelo that worked for me