Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-76586

GCP: Provider produced inconsistent result after apply - google_service_account

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • 4.16.z
    • 4.13.z, 4.12.z, 4.14.z, 4.15.z, 4.16.z
    • Installer / openshift-installer
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • In Progress
    • Bug Fix
    • Hide
      Cause: using old version of terraform did not have adequate eventual consistency checks for gcp service accounts

      Consequence: installs would fail due to missing service accounts, which were actually still in process of creation

      Fix: patch terraform provider gcp with eventual consistency check from newer versions

      Result: terraform provider will properly wait for eventual creation of SAs and install can succeed
      Show
      Cause: using old version of terraform did not have adequate eventual consistency checks for gcp service accounts Consequence: installs would fail due to missing service accounts, which were actually still in process of creation Fix: patch terraform provider gcp with eventual consistency check from newer versions Result: terraform provider will properly wait for eventual creation of SAs and install can succeed
    • None
    • None
    • None
    • None

      Description of problem:

          The fix given for issue https://issues.redhat.com/browse/OCPBUGS-42014(pointing to same problem) was at service account key creation. but the actual problem lies at service account creation itself.  

We suggest upgrading terraform and provider to the latest version in openshift-installer for 4.12+. The underlying issue is already fixed upstream and released in v6.45.0.

Note: we see this problem more often in lower openshift versions 4.12, 4.13 than in 4.16.

      Version-Release number of selected component (if applicable):

      How reproducible:

      Intermittent

      Steps to Reproduce:

          1.Install the UPI openshift cluster in GCP platform
    2.
    3.

      Actual results:

          level=error msg=Error: Provider produced inconsistent result after apply
level=error
level=error msg=When applying changes to
level=error msg=module.master.google_service_account.master-node-sa[0], provider
level=error msg="provider[\"openshift/local/google\"]" produced an unexpected new value: Root
level=error msg=resource was present, but now absent.
level=error
level=error msg=This is a bug in the provider, which should be reported in the provider's own

      Expected results:

      Additional info:

              rhn-support-vsunku Venkata Charan Sai Sunku
              rhn-support-vsunku Venkata Charan Sai Sunku
              Jianli Wei Jianli Wei
              Jianli Wei
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated: