Update access_id and access_key for OSS in the backup destination during backup

During log backup or secondary log backup, you can update access_id and access_key for Alibaba Cloud Object Storage Service (OSS) in the backup destination as needed.

Prerequisites

• The backup destination is configured in the backup_dest or backup_backup_dest parameter.

• The current user can operate the backup destination.

Feature limitations

• You can update access_id and access_key only for a backup destination configured in the backup_dest or backup_backup_dest parameter.

• If a backup task is being executed in the current cluster, you cannot update access_id or access_key for OSS configured in the backup_dest parameter.

• If a secondary backup task is being executed in the current cluster, you cannot update access_id or access_key for OSS configured in the backup_backup_dest parameter.

Feature usage recommendations

1. After updating access_id and access_key in the backup destination, do not immediately disable the old ones. You can set the expiration time to one hour after the update for the old access_id and access_key to avoid interrupting any backup and restore services that are using the old access_id and access_key, such as an ongoing backup clearing task.

2. Do not use the backup verification feature if access_id and access_key are updated while the old ones are disabled.

Update procedure

1. Log on to the sys tenant as the root user.

2. Execute the following statement to update access_id and access_key in the backup destination.

   obclient> ALTER SYSTEM CHANGE EXTERNAL_STORAGE_DEST PATH='backup_path' SET ACCESS_INFO='access_id=your_access_id&access_key=your_access_key';
   

   • PATH: information that uniquely identifies a destination, including the backup path and endpoint information.

     Currently, PATH supports only OSS in a format similar to oss://xxx?host=xxx. If the PATH parameter contains other information, an error is returned.

     The value of the PATH parameter cannot contain the & symbol. If the backup path of the destination contains a & symbol, you cannot use this method to update access_id or access_key in the backup destination.

   • ACCESS_INFO: the new values of access_id and access_key. Currently, only access_id and access_key values are allowed. In addition, access_id and access_key can only be set in pairs.

   Here is an example:

   obclient> ALTER SYSTEM CHANGE external_storage_dest PATH='oss://oceanbase-test-bucket/backup/?host=xxx.aliyun-inc.com' SET ACCESS_INFO='access_id=******&access_key=******';