Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-17757

GCP CLI authentication should only be allowed in manual mode

XMLWordPrintable

    • No
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, when you authenticated with the `credentialsMode` parameter not set to `Manual` and you used the `gcloud cli` tool, the installation program retrieved Google Cloud Platform (GCP) credentials from the `osServiceAccount.json` file. This operation caused the GCP cluster installation to fail. Now, a validation check scans the `install-config.yaml` file and prompts you with a message if you did not set `credentialsMode` to `Manual`. Note that in `Manual` mode, you must edit the manifests and provide the credentials. (link:https://issues.redhat.com/browse/OCPBUGS-17757[*OCPBUGS-17757*])
      Show
      * Previously, when you authenticated with the `credentialsMode` parameter not set to `Manual` and you used the `gcloud cli` tool, the installation program retrieved Google Cloud Platform (GCP) credentials from the `osServiceAccount.json` file. This operation caused the GCP cluster installation to fail. Now, a validation check scans the `install-config.yaml` file and prompts you with a message if you did not set `credentialsMode` to `Manual`. Note that in `Manual` mode, you must edit the manifests and provide the credentials. (link: https://issues.redhat.com/browse/OCPBUGS-17757 [* OCPBUGS-17757 *])
    • Bug Fix
    • Done

      Description of problem:

      Authenticate using the gcloud cli. The gcp credentials should no longer be using the data from osServiceAccount.json file. The installer should only allow installs to proceed when using Manual credentials mode.

      Version-Release number of selected component (if applicable):

       

      How reproducible:

      Always

      Steps to Reproduce:

      1. Remove ~/.gcp/osServiceAccount.json
2. ensure that GOOGLE_APPLICATION_CREDENTIALS environment variable is not set.
3. gcloud auth application-default login.
4. Run the installer

      Actual results:

      Install succeeds

      Expected results:

      Install should fail noting the install mode is not Manual

      Additional info:

       

            rh-ee-bbarbach Brent Barbachem
            rh-ee-bbarbach Brent Barbachem
            Jianli Wei Jianli Wei
            Darragh Fitzmaurice Darragh Fitzmaurice
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: