Getting a 404 when trying to create a secret versi...
# generale
eager-keyboard-30823
04/13/2022, 10:21 AMGetting a 404 when trying to create a secret version in GCP, anyone know why this might be happening? Using Pulumi 3.28 and F#
m
miniature-musician-31262
04/13/2022, 6:53 PMHi there. Are you getting a 404 from GCP? Can you share a bit more detail, maybe some of the error message?
e
eager-keyboard-30823
04/13/2022, 7:03 PMHi @miniature-musician-31262, sure thing. Here’s the error.
Copy code
Diagnostics:
REDACTED-ORG-ID/REDACTED-PROJECT-ID/dev (pulumi:pulumi:Stack)
error: update failed
SECRET-REDACTED-version (gcp:secretmanager:SecretVersion)
error: 1 error occurred:
* Error creating SecretVersion: googleapi: got HTTP response code 404 with body: <!DOCTYPE html>
<html lang=en>
<meta charset=utf-8>
<meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">
<title>Error 404 (Not Found)!!1</title>
<style>
*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px}
</style>
<a href=//www.google.com/><span id=logo aria-label=Google></span></a>
<p><b>404.</b> <ins>That's an error.</ins>
<p>The requested URL <code>/v1/SECRET-REDACTED:addVersion?alt=json</code> was not found on this server. <ins>That's all we know.</ins>
Resources:
5 unchanged
Duration: 4sm
miniature-musician-31262
04/13/2022, 7:50 PMThat’s interesting. Do you see that only for this resource, or for any GCP resource in the stack?
miniature-musician-31262
04/13/2022, 7:51 PMAlso, if you could share a little code, that might help; I don’t have the F# handy to work with secretsmanager 😅
e
eager-keyboard-30823
04/13/2022, 8:47 PMThis is the only resource I see the error for. Creating the secret itself works fine, for example. Here’s a gist: https://gist.github.com/LiHRaM/83e4543d994f5f9659258f398d8249ac
I’m using https://www.nuget.org/packages/Pulumi.FSharp.Gcp/ for the Computation Expression syntax. That version uses Pulumi.Gcp version 6.17.
m
miniature-musician-31262
04/13/2022, 9:53 PMThanks much. I think this gist may be missing some code, though 🤔
miniature-musician-31262
04/13/2022, 9:57 PMMaybe I’m missing a dep somewhere
e
eager-keyboard-30823
04/13/2022, 10:17 PMYou should also have a
Program.fs Copy code
module Program
open Pulumi.FSharp
let infra () =
let secrets = SecretManager.secrets ()
dict []
Deployment.run infra |> ignorem
miniature-musician-31262
04/13/2022, 10:51 PMI’ll see if I can get some help interally on this one, as I’ve not had much luck reproducing it yet
miniature-musician-31262
04/13/2022, 11:16 PMAre you sure you’ve enabled the Secret Manager API?
miniature-musician-31262
04/13/2022, 11:16 PM(In the GCP console)
e
eager-keyboard-30823
04/14/2022, 11:15 AMYep. I created both the secret and the secretversion manually and tried importing them, but importing the secretversion failed, so I deleted it and tried to recreate using Pulumi
eager-keyboard-30823
04/14/2022, 11:33 AMTrying to import gives the following error:
Copy code
$ pulumi import gcp:secretmanager/secretVersion:SecretVersion default projects/REDACTED-PROJECT/secrets/REDACTED-SECRET/versions/1
Previewing import (REDACTED-ORG/dev)
View Live: REDACTED
Type Name Plan Info
pulumi:pulumi:Stack REDACTED-STACK 1 error
= └─ gcp:secretmanager:SecretVersion default import 1 error
Diagnostics:
gcp:secretmanager:SecretVersion (default):
error: Preview failed: refreshing urn:pulumi:dev::REDACTED::gcp:secretmanager/secretVersion:SecretVersion::default: 1 error occurred:
* Error reading SecretVersion: googleapi: Error 403: Permission 'secretmanager.versions.access' denied for resource 'projects/REDACTED/secrets/REDACTED-SECRET/versions/1' (or it may not exist).
pulumi:pulumi:Stack (REDACTED-STACK):
error: preview failedeager-keyboard-30823
04/14/2022, 11:36 AMThat bit makes sense, as I don’t have
secretmanager.versions.accesseager-keyboard-30823
04/19/2022, 9:04 AMOkay, so turns out importing was failing because I needed the access privilege to be set for the user pulumi was authenticated as. The other error was because I was using the SecretId property instead of the Name property (where the name property has the full URI including the project)
8 Views