Velero backup PartiallyFailed when using Velero Plug-in for vSphere 1.1.0

Products

• VMware

Issue/Introduction

Symptoms:

• Velero backup PartiallyFailed when using below command :

velero backup create <backup-name> --exclude-namespaces=tkg-system,velero --include-cluster-resources=true --ttl 365000h
 

• You see messages similar to the following when you describe the Velero backup : 

 rpc error: code = Unknown desc = Resource CRD certificates.cert-manager.io is blocked, skipping" error.file="/go/src/github.com/vmware-tanzu/velero/pkg/backup/item_backupper.go:331"
 

• You are using the Velero Plugin for vSphere version 1.1.0 

Environment

VMware Tanzu Kubernetes Grid 1.x

Cause

It happens as some objects are restricted to backup. List of excluded resources can be found here  

 

 

Resolution

There is currently no fix to include restricted resources in backup. 

Workaround:

You can work around this issue by excluding cert-manager resources
 

velero backup create <backup-name>  --exclude-namespaces=tkg-system,velero --include-cluster-resources=true --ttl 365000h --exclude-resources certificaterequests.cert-manager.io,issuers.cert-manager.io,certificates.cert-manager.io

Additional Information

Backup and Restore Docs