[BUG]plugin metashield - restore failure "GET /v2/import not found"

[JCL38-ORANGE]

Describe the bug After a successful backup, I try restoring the backup

To Reproduce Steps to reproduce the behavior:

1. Configure metashield system/job
2. Launch backup job and check that it turns green
3. Launch a restore job
4. The restore job turns green but in fact there is an error ... DEBUG> 'restore' action returned error: SHIELD API endpoint GET /v2/import' not found SHIELD API endpoint GET /v2/import' not found ...

Expected behavior restore job must turn green without error

SHIELD versions

• SHIELD Core: 8.7.2
• SHIELD Cli: 8.7.2

[JCL38-ORANGE]

Hello,

When I curl the import endpoint : curl -k -X GET https://shield.internal.paas/v2/import {"error":"SHIELD API endpoint `GET /v2/import' not found"}

When I curl the export endpoint : curl -k -X GET https://shield.internal.paas/v2/export {"error":"Authorization required"}

Regards, Jean-Christophe.

[JCL38-ORANGE]

Hello,

Is possible to have a feedback on this ? Thanks a lot and regards, JC.

[jhunt]

I am unable to reproduce this in 8.7.0, or 8.7.2. Reviewing the pertinent code, I can see no way for the metashield plugin to ever make a GET request to /v2/import -- are you running a private fork of Open Source SHIELD?

[JCL38-ORANGE]

Hello James, Sorry for my late answer. We are running the official release and I still have the issue. Is it normal that I can't curl the https://shield.internal.paas/v2/import ? Following is my target/job configuration which works at backup time but not at restore time :

• type: replace path: /instance_groups/name=shield/jobs/name=import/properties/import/tenants/0/systems/- value: name: ((deployment_name))-meta-(ip) agent: (ip):5444 plugin: metashield config: url: http://((static_ip)) token: daa9a25d-8f52-4b9a-b9c8-2730e0e4a9eb core_ca_cert: ((shield-ca.certificate)) summary: "Metashield backup" jobs: - name: ((deployment_name))-meta-full-daily when: ((when)) policy: four-days-term retain: 3 storage: local-((deployment_name))-(ip) paused: false

DEBUG> --key '/2020/06/25/2020-06-25-031725-c3a5154d-e9c0-4b60-99c0-b76cf969600d' connecting to s3... DEBUG> 'restore' action returned error: SHIELD API endpoint GET /v2/import' not found SHIELD API endpoint GET /v2/import' not found retrieving backup archive from path '/2020/06/25/2020-06-25-031725-c3a5154d-e9c0-4b60-99c0-b76cf969600d in bucket 'fe-int-backup-shieldv8' streaming backup archive to standard output retrieved 74 bytes of data

EXITING 4 ERR> remote execution failed: Process exited with status 4

Thanks and regards, Jean-Christophe.

[JCL38-ORANGE]

Hello,

Maybe the problem is linked to the token required for the metashield plugin. Is it possible to use a generated token for the metashield plugin and how (bosh context) ?
Thanks and regards, Jean-Christophe.

[jhunt]

The token shouldn't be a problem; the issue seems to be an impossible one. Somehow you've got a compiled copy of the metashield plugin that is incorrectly issuing a GET request to the /v2/import endpoint (which should be a POST, instead) -- but I cannot for the life of me figure out where in the code it could be misconstruing it that badly.