Bypassing my previous question I now wrote some Pulumi code Pulumi Community #google-cloud

Bypassing my previous question, I now wrote some P...

limited-rainbow-51650

02/14/2020, 10:03 AM

Bypassing my previous question, I now wrote some Pulumi code to create a GCP project and a service account for that project:

Copy code

import * as gcp from "@pulumi/gcp";

const scaProject = new gcp.organizations.Project("StaticCodeAnalysis",{
    projectId: 'static-code-analysis',
    name: 'Static Code Analysis'
})

const serviceAccountPulumiScaManagement = new gcp.serviceAccount.Account("ServiceAccountPulumiScaManagement", {
    accountId: "pulumiciscamgmt",
    displayName: "Pulumi CI/CD Static Code Analysis Management",
    project: scaProject.id
});

But here I get the error:

Copy code

Diagnostics:
  gcp:serviceAccount:Account (ServiceAccountPulumiScaManagement):
    error: Error creating service account: googleapi: got HTTP response code 404 with body: <!DOCTYPE html>
    <html lang=en>
      <meta charset=utf-8>
      <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">
      <title>Error 404 (Not Found)!!1</title>
      <style>
        *{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* > body{background:url(<//www.google.com/images/errors/robot.png>) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(<//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png>) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(<//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png>) no-repeat 0% 0%/100% 100%;-moz-border-image:url(<//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png>) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(<//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png>) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px}
      </style>
      <a href=<//www.google.com/>><span id=logo aria-label=Google></span></a>
      <p><b>404.</b> <ins>That's an error.</ins>
      <p>The requested URL <code>/v1/projects/projects/static-code-analysis/serviceAccounts?alt=json&prettyPrint=false</code> was not found on this server.  <ins>That's all we know.</ins>
 
  pulumi:pulumi:Stack (00-infra-global-production):
    error: update failed

Is there something wrong with how the URL is constructed? Notice that there is twice the word

projects

init. I guess that’s one time too much.

limited-rainbow-51650

02/14/2020, 10:50 AM

It seems to be an issue either in the Terraform provider or in the underlying Google Cloud Go SDK. I filed an issue for the TF provider so further investigation is done: https://github.com/terraform-providers/terraform-provider-google/issues/5682

green-school-95910

02/14/2020, 3:30 PM

I haven't migrated that part of our deployment yet from Terraform, currently we have this and its working fine:

Copy code

resource "google_service_account" "workload_identity" {
  account_id   = "workload-identity"
  display_name = "Workload Identity"
}

limited-rainbow-51650

02/14/2020, 3:33 PM

Strange, tried it 3 times but it fails consistently for me. Which version of TF and the GCP provider do you use? Can you compare with the versions I published in the GH issue and add info to the ticket if it differs for you?

green-school-95910

02/14/2020, 3:33 PM

Sure

👍🏼 1

limited-rainbow-51650

02/16/2020, 9:14 PM

Found the problem: https://github.com/terraform-providers/terraform-provider-google/issues/5682#issuecomment-586754158

9 Views

Open in Slack

Previous Next