{"action":"created","issue":{"url":"https://api.github.com/repos/heptio/ark/issues/329","repository_url":"https://api.github.com/repos/heptio/ark","labels_url":"https://api.github.com/repos/heptio/ark/issues/329/labels{/name}","comments_url":"https://api.github.com/repos/heptio/ark/issues/329/comments","events_url":"https://api.github.com/repos/heptio/ark/issues/329/events","html_url":"https://github.com/heptio/ark/issues/329","id":300032116,"number":329,"title":"Server error on GCE 403: Required 'compute.projects.get' permission","user":{"login":"PCatinean","id":3704235,"avatar_url":"https://avatars2.githubusercontent.com/u/3704235?v=4","gravatar_id":"","url":"https://api.github.com/users/PCatinean","html_url":"https://github.com/PCatinean","followers_url":"https://api.github.com/users/PCatinean/followers","following_url":"https://api.github.com/users/PCatinean/following{/other_user}","gists_url":"https://api.github.com/users/PCatinean/gists{/gist_id}","starred_url":"https://api.github.com/users/PCatinean/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PCatinean/subscriptions","organizations_url":"https://api.github.com/users/PCatinean/orgs","repos_url":"https://api.github.com/users/PCatinean/repos","events_url":"https://api.github.com/users/PCatinean/events{/privacy}","received_events_url":"https://api.github.com/users/PCatinean/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-02-25T14:53:24Z","updated_at":"2018-02-26T15:05:33Z","closed_at":null,"author_association":"NONE","body":"When deploying ark as described in the documentation (and also the role bindings) this error comes up in the logs of the ark server.\r\n\r\nEven after making the service account used by the server and deleting / adding the server back the error seems to persist."},"comment":{"url":"https://api.github.com/repos/heptio/ark/issues/comments/368532514","html_url":"https://github.com/heptio/ark/issues/329#issuecomment-368532514","issue_url":"https://api.github.com/repos/heptio/ark/issues/329","id":368532514,"user":{"login":"ncdc","id":354,"avatar_url":"https://avatars2.githubusercontent.com/u/354?v=4","gravatar_id":"","url":"https://api.github.com/users/ncdc","html_url":"https://github.com/ncdc","followers_url":"https://api.github.com/users/ncdc/followers","following_url":"https://api.github.com/users/ncdc/following{/other_user}","gists_url":"https://api.github.com/users/ncdc/gists{/gist_id}","starred_url":"https://api.github.com/users/ncdc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ncdc/subscriptions","organizations_url":"https://api.github.com/users/ncdc/orgs","repos_url":"https://api.github.com/users/ncdc/repos","events_url":"https://api.github.com/users/ncdc/events{/privacy}","received_events_url":"https://api.github.com/users/ncdc/received_events","type":"User","site_admin":false},"created_at":"2018-02-26T15:05:33Z","updated_at":"2018-02-26T15:05:33Z","author_association":"OWNER","body":"I worked with @PCatinean and we were able to get this working. We aren't sure what the problem was, but once we following the documentation steps exactly, it started working.\r\n\r\nThis particular error is quite confusing, however, as it's not entirely clear what is wrong (it's clear that a permission is missing, but there's no mention of why or how to fix).\r\n\r\nWhat's going on in this particular case is that during startup, Ark tries to query GCE to make sure that the what you specified here in the Ark config is a valid GCE project and that you have permission to access it:\r\n\r\n```\r\npersistentVolumeProvider:\r\n  name: gcp:\r\n  config:\r\n    project: your-project-name\r\n```\r\n\r\nWe added this logic a while ago to try to make Ark \"fail fast\" in the event of a misconfiguration. I still think this is worthwhile, although if it's tripping up too many people we could discuss if it's worth changing the logic here or removing it.\r\n\r\n@skriss I do think we should call `errors.Wrap` and include a message that we couldn't retrieve the specified project, and suggest that the user confirm that the project is correct in the config, the GCE service account has `compute.storageAdmin`, and that the `cloud-credentials` secret is correct."}}
{"actor":{"display_login":"ncdc"}}