Hide Forgot
Description of problem: create gcpcluster get error Version-Release number of selected component (if applicable): 4.11.0-0.nightly-2022-06-23-153912 How reproducible: Always Steps to Reproduce: 1. install a fresh cluster with feature gate liuhuali@Lius-MacBook-Pro huali-test % oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.11.0-0.nightly-2022-06-23-153912 True False 97m Cluster version is 4.11.0-0.nightly-2022-06-23-153912 2. create gcpcluster, yaml file as below: apiVersion: infrastructure.cluster.x-k8s.io/v1beta1 kind: GCPCluster metadata: name: huliu-gcp18-w98g7 namespace: openshift-cluster-api spec: region: us-central1 project: openshift-qe network: name: huliu-gcp18-w98g7-network liuhuali@Lius-MacBook-Pro huali-test % oc create -f my-gcpcluster.yaml gcpcluster.infrastructure.cluster.x-k8s.io/huliu-gcp18-w98g7 created liuhuali@Lius-MacBook-Pro huali-test % oc get gcpcluster NAME CLUSTER READY NETWORK huliu-gcp18-w98g7 huliu-gcp18-w98g7 huliu-gcp18-w98g7-network liuhuali@Lius-MacBook-Pro huali-test % oc describe gcpcluster huliu-gcp18-w98g7 Name: huliu-gcp18-w98g7 Namespace: openshift-cluster-api Labels: cluster.x-k8s.io/cluster-name=huliu-gcp18-w98g7 Annotations: <none> API Version: infrastructure.cluster.x-k8s.io/v1beta1 Kind: GCPCluster Metadata: Creation Timestamp: 2022-06-24T08:36:21Z Deletion Grace Period Seconds: 0 Deletion Timestamp: 2022-06-24T09:19:08Z Finalizers: gcpcluster.infrastructure.cluster.x-k8s.io Generation: 3 Managed Fields: API Version: infrastructure.cluster.x-k8s.io/v1beta1 Fields Type: FieldsV1 fieldsV1: f:spec: .: f:project: f:region: Manager: kubectl-create Operation: Update Time: 2022-06-24T08:36:21Z API Version: infrastructure.cluster.x-k8s.io/v1beta1 Fields Type: FieldsV1 fieldsV1: f:metadata: f:labels: .: f:cluster.x-k8s.io/cluster-name: f:ownerReferences: .: k:{"uid":"fc2698c2-30fb-402d-a04b-2fcf1a72f975"}: Manager: cluster-api-controller-manager Operation: Update Time: 2022-06-24T08:36:26Z API Version: infrastructure.cluster.x-k8s.io/v1beta1 Fields Type: FieldsV1 fieldsV1: f:metadata: f:finalizers: .: v:"gcpcluster.infrastructure.cluster.x-k8s.io": Manager: cluster-api-provider-gcp-controller-manager Operation: Update Time: 2022-06-24T08:36:26Z API Version: infrastructure.cluster.x-k8s.io/v1beta1 Fields Type: FieldsV1 fieldsV1: f:metadata: f:annotations: .: f:kubectl.kubernetes.io/last-applied-configuration: f:spec: f:network: .: f:name: Manager: kubectl-client-side-apply Operation: Update Time: 2022-06-24T09:20:14Z Owner References: API Version: cluster.x-k8s.io/v1beta1 Block Owner Deletion: true Controller: true Kind: Cluster Name: huliu-gcp18-w98g7 UID: fc2698c2-30fb-402d-a04b-2fcf1a72f975 Resource Version: 78484 UID: 04098aca-61b6-49ad-80e1-bb46b207bb18 Spec: Network: Name: huliu-gcp18-w98g7-network Project: openshift-qe Region: us-central1 Events: Type Reason Age From Message ---- ------ ---- ---- ------- Warning GCPClusterReconcile 4m8s (x24 over 45m) gcp-controller Reconcile error - googleapi: Error 403: Required 'compute.firewalls.create' permission for 'projects/openshift-qe/global/firewalls/allow-huliu-gcp18-w98g7-healthchecks' More details: Reason: forbidden, Message: Required 'compute.firewalls.create' permission for 'projects/openshift-qe/global/firewalls/allow-huliu-gcp18-w98g7-healthchecks' Reason: forbidden, Message: Required 'compute.networks.updatePolicy' permission for 'projects/openshift-qe/global/networks/default' Actual results: create gcpcluster succeed, but cannot get Ready, reporting error. Expected results: create gcpcluster succeed, and can get Ready, no error. Additional info:
Could we check if this has been resolved in 4.12, if it has, we will attempt to backport the resolution to 4.11 as well
(In reply to Joel Speed from comment #3) > Could we check if this has been resolved in 4.12, if it has, we will attempt > to backport the resolution to 4.11 as well Thanks Joel, I just checked this has been resolved in 4.12 and verified https://bugzilla.redhat.com/show_bug.cgi?id=2107566
PR is in place, waiting for the first 4.11.z stream release to merge
*** This bug has been marked as a duplicate of bug 2107564 ***