Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-43808

GCP - Openshift UPI Installer fails with error "failed to get private zone" when service account has no DNS permissions

XMLWordPrintable

    • Important
    • None
    • False
    • Hide

      None

      Show
      None

      Description of problem:

      Trying to install Openshift UPI in GCP it fails with error "failed to get private zone" when the service account used by the installer has no DNS permissions.

      Version-Release number of selected component (if applicable):

      4.13.z, 4.14.z, also 4.15.z, 4.16.z and 4.17.z may be be impacted

      How reproducible:

      Attempt to create a UPI cluster on GCP with no DNS permissions

      Actual results:

      Start command=install-config
      Start command=manifests
      Error command=manifests error=Error in openshift-installer (1): level=debug msg=OpenShift Installer 4.14.38
      level=debug msg=Built from commit a8c141497478741629645e70b1dc7019992d4778
      […]
      level=debug msg=  Fetching DNS Config...
      level=debug msg=    Fetching Install Config...
      level=debug msg=    Reusing previously-fetched Install Config
      level=debug msg=    Fetching Cluster ID...
      level=debug msg=    Reusing previously-fetched Cluster ID
      level=debug msg=    Fetching Platform Credentials Check...
      level=debug msg=    Reusing previously-fetched Platform Credentials Check
      level=debug msg=  Generating DNS Config...
      level=fatal msg=failed to fetch Common Manifests: failed to fetch dependency of "Common Manifests": failed to generate asset "DNS Config": failed to get private zone for "ocp.gcp.intesasanpaolo.com": failed to list DNS Zones: googleapi: Error 403: Forbidden, forbidden 

      Expected results:

      Cluster is created successfully

              rh-ee-bbarbach Brent Barbachem
              rhn-support-gizzi Giovanni Luca Izzi
              Gaoyun Pei Gaoyun Pei
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: