"The request signature we calculated does not match the signature you provided" on Velero when configured with StorageGRID
Applies to
- StorageGRID All Releases
Issue
- Velero application reports the following error when attempting to execute the
velero backup logs <backup_name>command on client-sideThe request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key RESTAuthentication and SOAP Authentication for details.
- Additionally, the following error can be seen on the StorageGRID-side on the storage node that receives the request in the bycast.log:
Nov 18 00:47:01 <node_name> ADE: |1
2081203 1343725441 S3RQ %CEA 2020-11-18T00:47:01.206587| NOTICE 0162 S3RQ: S3 error response: R
equestId=1605660421200284, Resource=/velero-sod/backups/firstbackup/firstbackup-logs.gz?X-Amz-Alg
orithm=AWS4-HMAC-SHA256&X-Amz-Credential=E3G1308Z7WCDO30PY1X5%2F20201118%2Fus-east-1%2Fs3%2Faws4_
request&X-Amz-Date=20201118T004700Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=12
9eec16a149eeb2da6989b0b6f41cbae6ecdc1c8b965fe013e89e943bede88c, HTTP Status Code=403, ErrorMsg=S
ignatureDoesNotMatch, ErrorType=ClientAuthorization, CustomErrorMessage={<none>}, Details={Failed
to verify signature}