Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-19376

[gcp] IPI installation using the service account attached to a GCP VM always fail with error "unable to parse credentials"

XMLWordPrintable

    • Important
    • No
    • Sprint 242
    • 1
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, installing a cluster on GCP using a service account attached to a VM for authentication could fail due to an internal data validation bug. With this release, the installation program has been updated to correctly validate the authentication parameters when using a service account attached to a VM. (link:https://issues.redhat.com/browse/OCPBUGS-19376[*OCPBUGS-19376*])
      Show
      * Previously, installing a cluster on GCP using a service account attached to a VM for authentication could fail due to an internal data validation bug. With this release, the installation program has been updated to correctly validate the authentication parameters when using a service account attached to a VM. (link: https://issues.redhat.com/browse/OCPBUGS-19376 [* OCPBUGS-19376 *])
    • Bug Fix
    • Done

      Description of problem:

      IPI installation using the service account attached to a GCP VM always fail with error "unable to parse credentials"

      Version-Release number of selected component (if applicable):

      4.14.0-0.nightly-2023-09-15-233408

      How reproducible:

      Always

      Steps to Reproduce:

      1. "create install-config"
      2. edit install-config.yaml to insert "credentialsMode: Manual"
      3. "create manifests"
      4. manually create the required credentials and copy the manifests to installation-dir/manifests directory
      5. launch the bastion host along with binding to the pre-configured service account ipi-on-bastion-sa@openshift-qe.iam.gserviceaccount.com and scopes being "cloud-platform"
      6. copy the installation-dir and openshift-install to the bastion host
      7. try "create cluster" on the bastion host 

      Actual results:

      The installation failed on "Creating infrastructure resources"

      Expected results:

      The installation should succeed.

      Additional info:

      (1) FYI the 4.12 epic: https://issues.redhat.com/browse/CORS-2260
      
      (2) 4.12.34 doesn't have the issue (Flexy-install/234112/). 
      
      (3) 4.13.13 doesn’t have the issue (Flexy-install/234126/).
      
      (4) The 4.14 errors (Flexy-install/234113/):
      09-19 16:13:44.919  level=info msg=Consuming Master Ignition Config from target directory
      09-19 16:13:44.919  level=info msg=Consuming Bootstrap Ignition Config from target directory
      09-19 16:13:44.919  level=info msg=Consuming Worker Ignition Config from target directory
      09-19 16:13:44.919  level=info msg=Credentials loaded from gcloud CLI defaults
      09-19 16:13:49.071  level=info msg=Creating infrastructure resources...
      09-19 16:13:50.950  level=error
      09-19 16:13:50.950  level=error msg=Error: unable to parse credentials
      09-19 16:13:50.950  level=error
      09-19 16:13:50.950  level=error msg=  with provider["openshift/local/google"],
      09-19 16:13:50.950  level=error msg=  on main.tf line 10, in provider "google":
      09-19 16:13:50.950  level=error msg=  10: provider "google" {
      09-19 16:13:50.950  level=error
      09-19 16:13:50.950  level=error msg=unexpected end of JSON input
      09-19 16:13:50.950  level=error msg=failed to fetch Cluster: failed to generate asset "Cluster": failure applying terraform for "cluster" stage: failed to create cluster: failed to apply Terraform: exit status 1
      09-19 16:13:50.950  level=error
      09-19 16:13:50.950  level=error msg=Error: unable to parse credentials
      09-19 16:13:50.950  level=error
      09-19 16:13:50.950  level=error msg=  with provider["openshift/local/google"],
      09-19 16:13:50.950  level=error msg=  on main.tf line 10, in provider "google":
      09-19 16:13:50.950  level=error msg=  10: provider "google" {
      09-19 16:13:50.950  level=error
      09-19 16:13:50.950  level=error msg=unexpected end of JSON input
      09-19 16:13:50.950  level=error
      

              rh-ee-bbarbach Brent Barbachem
              rhn-support-jiwei Jianli Wei
              Jianli Wei Jianli Wei
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: