-
Bug
-
Resolution: Done-Errata
-
Critical
-
4.14.0
-
Important
-
No
-
Proposed
-
False
-
This is a clone of issue OCPBUGS-19376. The following is the description of the original issue:
—
Description of problem:
IPI installation using the service account attached to a GCP VM always fail with error "unable to parse credentials"
Version-Release number of selected component (if applicable):
4.14.0-0.nightly-2023-09-15-233408
How reproducible:
Always
Steps to Reproduce:
1. "create install-config" 2. edit install-config.yaml to insert "credentialsMode: Manual" 3. "create manifests" 4. manually create the required credentials and copy the manifests to installation-dir/manifests directory 5. launch the bastion host along with binding to the pre-configured service account ipi-on-bastion-sa@openshift-qe.iam.gserviceaccount.com and scopes being "cloud-platform" 6. copy the installation-dir and openshift-install to the bastion host 7. try "create cluster" on the bastion host
Actual results:
The installation failed on "Creating infrastructure resources"
Expected results:
The installation should succeed.
Additional info:
(1) FYI the 4.12 epic: https://issues.redhat.com/browse/CORS-2260 (2) 4.12.34 doesn't have the issue (Flexy-install/234112/). (3) 4.13.13 doesn’t have the issue (Flexy-install/234126/). (4) The 4.14 errors (Flexy-install/234113/): 09-19 16:13:44.919 level=info msg=Consuming Master Ignition Config from target directory 09-19 16:13:44.919 level=info msg=Consuming Bootstrap Ignition Config from target directory 09-19 16:13:44.919 level=info msg=Consuming Worker Ignition Config from target directory 09-19 16:13:44.919 level=info msg=Credentials loaded from gcloud CLI defaults 09-19 16:13:49.071 level=info msg=Creating infrastructure resources... 09-19 16:13:50.950 level=error 09-19 16:13:50.950 level=error msg=Error: unable to parse credentials 09-19 16:13:50.950 level=error 09-19 16:13:50.950 level=error msg= with provider["openshift/local/google"], 09-19 16:13:50.950 level=error msg= on main.tf line 10, in provider "google": 09-19 16:13:50.950 level=error msg= 10: provider "google" { 09-19 16:13:50.950 level=error 09-19 16:13:50.950 level=error msg=unexpected end of JSON input 09-19 16:13:50.950 level=error msg=failed to fetch Cluster: failed to generate asset "Cluster": failure applying terraform for "cluster" stage: failed to create cluster: failed to apply Terraform: exit status 1 09-19 16:13:50.950 level=error 09-19 16:13:50.950 level=error msg=Error: unable to parse credentials 09-19 16:13:50.950 level=error 09-19 16:13:50.950 level=error msg= with provider["openshift/local/google"], 09-19 16:13:50.950 level=error msg= on main.tf line 10, in provider "google": 09-19 16:13:50.950 level=error msg= 10: provider "google" { 09-19 16:13:50.950 level=error 09-19 16:13:50.950 level=error msg=unexpected end of JSON input 09-19 16:13:50.950 level=error
- blocks
-
OCPBUGS-20138 [gcp] IPI installation using the service account attached to a GCP VM always fail with error "unable to parse credentials"
- Closed
- clones
-
OCPBUGS-19376 [gcp] IPI installation using the service account attached to a GCP VM always fail with error "unable to parse credentials"
- Closed
- is blocked by
-
OCPBUGS-19376 [gcp] IPI installation using the service account attached to a GCP VM always fail with error "unable to parse credentials"
- Closed
- is cloned by
-
OCPBUGS-20138 [gcp] IPI installation using the service account attached to a GCP VM always fail with error "unable to parse credentials"
- Closed
- links to
-
RHSA-2023:5006 OpenShift Container Platform 4.14.z security update