{"action":"created","issue":{"url":"https://api.github.com/repos/kubeflow/kubeflow/issues/1432","repository_url":"https://api.github.com/repos/kubeflow/kubeflow","labels_url":"https://api.github.com/repos/kubeflow/kubeflow/issues/1432/labels{/name}","comments_url":"https://api.github.com/repos/kubeflow/kubeflow/issues/1432/comments","events_url":"https://api.github.com/repos/kubeflow/kubeflow/issues/1432/events","html_url":"https://github.com/kubeflow/kubeflow/issues/1432","id":354157144,"node_id":"MDU6SXNzdWUzNTQxNTcxNDQ=","number":1432,"title":"[gcp] VM account should have GCS read only scope to support pulling from GCR","user":{"login":"jlewi","id":777219,"node_id":"MDQ6VXNlcjc3NzIxOQ==","avatar_url":"https://avatars3.githubusercontent.com/u/777219?v=4","gravatar_id":"","url":"https://api.github.com/users/jlewi","html_url":"https://github.com/jlewi","followers_url":"https://api.github.com/users/jlewi/followers","following_url":"https://api.github.com/users/jlewi/following{/other_user}","gists_url":"https://api.github.com/users/jlewi/gists{/gist_id}","starred_url":"https://api.github.com/users/jlewi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jlewi/subscriptions","organizations_url":"https://api.github.com/users/jlewi/orgs","repos_url":"https://api.github.com/users/jlewi/repos","events_url":"https://api.github.com/users/jlewi/events{/privacy}","received_events_url":"https://api.github.com/users/jlewi/received_events","type":"User","site_admin":false},"labels":[{"id":852268762,"node_id":"MDU6TGFiZWw4NTIyNjg3NjI=","url":"https://api.github.com/repos/kubeflow/kubeflow/labels/approved","name":"approved","color":"03db12","default":false},{"id":806984230,"node_id":"MDU6TGFiZWw4MDY5ODQyMzA=","url":"https://api.github.com/repos/kubeflow/kubeflow/labels/priority/p1","name":"priority/p1","color":"db03cc","default":false},{"id":955587600,"node_id":"MDU6TGFiZWw5NTU1ODc2MDA=","url":"https://api.github.com/repos/kubeflow/kubeflow/labels/release/0.3.0","name":"release/0.3.0","color":"ef1ad6","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-08-27T02:22:30Z","updated_at":"2018-08-29T05:34:36Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"Our DM configs should add readonly scope to the VM service account so that we can pull private images.\r\n\r\nhttps://github.com/kubeflow/kubeflow/blob/master/scripts/gke/deployment_manager_configs/cluster.jinja#L24\r\n\r\nWe should include\r\nhttps://www.googleapis.com/auth/devstorage.read_only\r\n"},"comment":{"url":"https://api.github.com/repos/kubeflow/kubeflow/issues/comments/416829810","html_url":"https://github.com/kubeflow/kubeflow/issues/1432#issuecomment-416829810","issue_url":"https://api.github.com/repos/kubeflow/kubeflow/issues/1432","id":416829810,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNjgyOTgxMA==","user":{"login":"sarahmaddox","id":6138251,"node_id":"MDQ6VXNlcjYxMzgyNTE=","avatar_url":"https://avatars0.githubusercontent.com/u/6138251?v=4","gravatar_id":"","url":"https://api.github.com/users/sarahmaddox","html_url":"https://github.com/sarahmaddox","followers_url":"https://api.github.com/users/sarahmaddox/followers","following_url":"https://api.github.com/users/sarahmaddox/following{/other_user}","gists_url":"https://api.github.com/users/sarahmaddox/gists{/gist_id}","starred_url":"https://api.github.com/users/sarahmaddox/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sarahmaddox/subscriptions","organizations_url":"https://api.github.com/users/sarahmaddox/orgs","repos_url":"https://api.github.com/users/sarahmaddox/repos","events_url":"https://api.github.com/users/sarahmaddox/events{/privacy}","received_events_url":"https://api.github.com/users/sarahmaddox/received_events","type":"User","site_admin":false},"created_at":"2018-08-29T05:34:36Z","updated_at":"2018-08-29T05:34:36Z","author_association":"NONE","body":"Confirmation: I've just successfully pulled a container into GKE from GCR, after manually adjusting the OAuth settings in cluster.jinja as described in this issue. \r\n\r\nBefore making that change, I reliably received the following error in GKE:\r\nImagePullBackOff rpc error: code = Unknown desc = unauthorized: authentication required: ErrImagePull\r\nFailed to pull image \"gcr.io/ml-writers/sarahmaddox-kf-gcp-train:1535231259\": rpc error: code = Unknown desc = unauthorized: authentication required\r\n\r\nAfter making the change to the cluster.jinja file, the image pull works."}}
{"actor":{"display_login":"sarahmaddox"}}