The Hive GCP PrivateLink controller is attempting to create DNS records even though the Endpoint creation failed. As a result, the PrivateLinkFailed condition is showing showing the DNS creation failure instead of the prior endpoint creation failure.

    Every time the Endpoint creation fails.

    1.Configure hive to use a primary GCP service account that does not have sufficient permissions to create the Endpoint.
    2.Deploy a GCP PrivateLink cluster
    3.Watch the PrivateLinkFailed condition.     

    error generating DNS records: configured to use ip address, but no
    address found.

    error creating the Endpoint: operation completed with error: SERVICE_DIRECTORY_PERMISSION_DENIED