Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-11736

GCP XPN Installs Require bindPrivateDNSZone Permission in host project

XMLWordPrintable

    • Moderate
    • No
    • 2
    • Sprint 235, Sprint 237, Sprint 236
    • 3
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      Previously, the {product-title} installation program did not find private hosted zones in the host project during installations on Google Cloud Platform using a shared VPC. With this update, the installation program checks for an existing private hosted zone in the host project and uses the private hosted zone if it exists. (link:https://issues.redhat.com/browse/OCPBUGS-11736[*OCPBUGS-11736*])
      Show
      Previously, the {product-title} installation program did not find private hosted zones in the host project during installations on Google Cloud Platform using a shared VPC. With this update, the installation program checks for an existing private hosted zone in the host project and uses the private hosted zone if it exists. (link: https://issues.redhat.com/browse/OCPBUGS-11736 [* OCPBUGS-11736 *])
    • Bug Fix
    • Done

      Description of problem:

      GCP XPN installs require the permission `projects/<host-project>/roles/dns.networks.bindPrivateDNSZone` in the host project. This permission is not always provided in organizations. The installer requires this permission in order to create a private DNS zone and bind it to the shared networks.

Instead, the installer should be able to create records in a provided private zone that matches the base domain.

      Version-Release number of selected component (if applicable):

       

      How reproducible:

       

      Steps to Reproduce:

      1.
2.
3.

      Actual results:

       

      Expected results:

       

      Additional info:

       

            rh-ee-bbarbach Brent Barbachem
            padillon Patrick Dillon
            Jianli Wei Jianli Wei
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: