Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-35262

[GCP CAPI install] installing into Shared VPC stuck in waiting for network infrastructure ready

XMLWordPrintable

    • Important
    • Yes
    • Sprint 255, Installer Sprint 256, Installer Sprint 257, Installer (PB) Sprint 258
    • 4
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, when installing {cap-gcp-first} into a shared Virtual Private Cloud (VPC) without the required permission `compute.firewalls.create` the installation failed because no firewall rules were created. With this release, a fix ensures that a rule to create the firewall is skipped during installation and the issue is resolved. (link:https://issues.redhat.com/browse/OCPBUGS-35262 [*OCPBUGS-35262*])
      Show
      * Previously, when installing {cap-gcp-first} into a shared Virtual Private Cloud (VPC) without the required permission `compute.firewalls.create` the installation failed because no firewall rules were created. With this release, a fix ensures that a rule to create the firewall is skipped during installation and the issue is resolved. (link: https://issues.redhat.com/browse/OCPBUGS-35262 [* OCPBUGS-35262 *])
    • Bug Fix
    • In Progress

      Description of problem:

      installing into Shared VPC stuck in waiting for network infrastructure ready

      Version-Release number of selected component (if applicable):

      4.17.0-0.nightly-2024-06-10-225505

      How reproducible:

      Always

      Steps to Reproduce:

      1. "create install-config" and then insert Shared VPC settings (see [1])
      2. activate the service account which has the minimum permissions in the host project (see [2])
      3. "create cluster"
      
      FYI The GCP project "openshift-qe" is the service project, and the GCP project "openshift-qe-shared-vpc" is the host project. 

      Actual results:

      1. Getting stuck in waiting for network infrastructure to become ready, until Ctrl+C is pressed.
      2. 2 firewall-rules are created in the service project unexpectedly (see [3]).

      Expected results:

      The installation should succeed, and there should be no any firewall-rule getting created either in the service project or in the host project.

      Additional info:

       

              rh-ee-bbarbach Brent Barbachem
              rhn-support-jiwei Jianli Wei
              Jianli Wei Jianli Wei
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: