cloud-native-toolkit / software-everywhere

Automation modules to deploy IBM Software on IBM Cloud, AWS, and Azure
https://modules.cloudnativetoolkit.dev
Apache License 2.0
9 stars 9 forks source link

Build Error - VPN Server module #472

Closed balasgit closed 2 years ago

balasgit commented 2 years ago

Error: External Program Execution Failed │ │ with module.vpn_module.module.clis.data.external.setup-binaries, │ on .terraform/modules/vpn_module.clis/main.tf line 22, in data "external" "setup-binaries": │ 22: program = ["bash", "${path.module}/scripts/setup-binaries.sh"] │

More details

balasgit commented 2 years ago

Need to find options to pass certificate since it cant find during VPN server

More Details - https://github.com/terraform-ibm-modules/terraform-ibm-toolkit-vpn-server/runs/8143491554?check_suite_focus=true

Error: local-exec provisioner error │ │ with module.vpn_module.null_resource.vpn_server, │ on module/main.tf line 146, in resource "null_resource" "vpn_server": │ 146: provisioner "local-exec" { │ │ Error running command 'module/scripts/create-vpn.sh': exit status 1. │ Output: API endpoint: https://cloud.ibm.com/ │ Authenticating... │ OK │ │ Targeted account GoldenEye GoldenEye Development's Account │ (abac0df06b644a9cabc6e44f55b3880e) <-> 2314088 │ │ Targeted resource group vpc-count-rg │ │ Targeted region eu-gb │ │
│ API endpoint: https://cloud.ibm.com/
│ Region: eu-gb
│ User: GoldenEye.Development@ibm.com
│ Account: GoldenEye GoldenEye Development's Account │ (abac0df06b644a9cabc6e44f55b3880e) <-> 2314088
│ Resource group: vpc-count-rg
│ CF API endpoint:
│ Org:
│ Space:
│ ibmcloud is vpn-server-create --name "vpc-count-rg-vpn-client2site" │ --subnet │ "0787-22955292-7290-43a2-b989-929f6dcb3b15,0797-51f502e2-05a8-473f-aa34-ff601a8a179c" │ --cert │ "crn:v1:bluemix:public:cloudcerts:eu-gb:a/abac0df06b644a9cabc6e44f55b3880e:ee96c507-6e85-4ec5-aaed-29478dfabb91:certificate:61017aae59eb2e2a3a0615c9218036ec" │ --client-ca │ "crn:v1:bluemix:public:cloudcerts:eu-gb:a/abac0df06b644a9cabc6e44f55b3880e:ee96c507-6e85-4ec5-aaed-29478dfabb91:certificate:fd7191b724c8e13fd9fd84b2bc850b54" │ --client-ip-pool "172.16.0.0/16" --client-dns "161.26.0.7,161.26.0.8" │ --client-auth-methods "certificate" --sg │ "r018-1c72d75e-dcb3-44c2-9e0d-569c3b518a34" --protocol "udp" --port │ "443" --enable-split-tunnel "true" --client-idle-timeout "600" │ Migrate your vpn server certificates from Certificate Manager to Secrets │ Manager and use the crn of the secret from Secrets Manager for the cert and │ client-ca options, since the creation of vpn server with certificates from │ Certificate Manager is deprecated. │ Creating VPN server vpc-count-rg-vpn-client2site in resource group │ vpc-count-rg under account GoldenEye GoldenEye Development's Account as │ user GoldenEye.Development@ibm.com... │ FAILED │ Failed to create a VPN server. │ │ FAILED │ Response HTTP Status Code: 404 │ Error code: vpn_server_certificate_not_found │ Error message: The certificate │ 'crn:v1:bluemix:public:cloudcerts:eu-gb:a/abac0df06b644a9cabc6e44f55b3880e:ee96c507-6e85-4ec5-aaed-29478dfabb91:certificate:61017aae59eb2e2a3a0615c9218036ec' │ could not be found. Please try again with a correct certificate CRN. │ More information: │ https://cloud.ibm.com/docs/infrastructure/vpc/errors.html#vpn_server_certificate_not_found │ Trace ID: 469588f0-4ae7-93b0-8f4f-ec5570bcf974 │ │ │ Failed to show VPN server. │ Response HTTP Status Code: 404 │ Error code: not_found │ Error message: Please check whether the resource you are requesting exists. │ Error target name: ID, type: parameter │ Error target value: vpc-count-rg-vpn-client2site │ More information: │ https://cloud.ibm.com/docs/vpc?topic=vpc-rias-error-messages#not_found │ Trace ID: 12e4e575-c377-9e9e-8728-e9ce73f74e33 │ │ Creating VPN route vpc-network of server vpc-count-rg-vpn-client2site under │ account GoldenEye GoldenEye Development's Account as user │ GoldenEye.Development@ibm.com... │ FAILED │ Failed to create VPN route. │ │ FAILED │ Response HTTP Status Code: 404 │ Error code: not_found │ Error message: Please check whether the resource you are requesting exists. │ Error target name: ID, type: parameter │ Error target value: vpc-count-rg-vpn-client2site │ More information: │ https://cloud.ibm.com/docs/vpc?topic=vpc-rias-error-messages#not_found │ Trace ID: 78033f23-6a63-98ba-8984-446c4d5bfbcf │ │ │ Creating VPN route services of server vpc-count-rg-vpn-client2site under │ account GoldenEye GoldenEye Development's Account as user │ GoldenEye.Development@ibm.com... │ FAILED │ Failed to create VPN route. │ │ FAILED │ Response HTTP Status Code: 404 │ Error code: not_found │ Error message: Please check whether the resource you are requesting exists. │ Error target name: ID, type: parameter │ Error target value: vpc-count-rg-vpn-client2site │ More information: │ https://cloud.ibm.com/docs/vpc?topic=vpc-rias-error-messages#not_found │ Trace ID: 40965354-0b51-9dad-adf4-081dc28766e3 │ │ │ Creating VPN route dns of server vpc-count-rg-vpn-client2site under account │ GoldenEye GoldenEye Development's Account as user │ GoldenEye.Development@ibm.com... │ FAILED │ Failed to create VPN route. │ │ FAILED │ Response HTTP Status Code: 404 │ Error code: not_found │ Error message: Please check whether the resource you are requesting exists. │ Error target name: ID, type: parameter │ Error target value: vpc-count-rg-vpn-client2site │ More information: │ https://cloud.ibm.com/docs/vpc?topic=vpc-rias-error-messages#not_found │ Trace ID: a595c556-4a62-9a0a-8215-e3e2c82f9e65 │ │ │ ╵ Error: Process completed with exit code 1.

balasgit commented 2 years ago

Need to create the Serviceauth since target cloud account does not have permission.

balasgit commented 2 years ago

Added Service Auth but running into errors

│ If you have feedback on the design of this feature, please open a GitHub │ issue to discuss it. ╵ ╷ │ Error: External Program Execution Failed │ │ with module.resource_group.module.clis.data.external.setup-binaries, │ on .terraform/modules/resource_group.clis/main.tf line 22, in data "external" "setup-binaries": │ 22: program = ["bash", "${path.module}/scripts/setup-binaries.sh"] │ │ The data source received an unexpected error while attempting to execute │ the program. │ │ Program: /bin/bash │ Error Message: igc release not found │ │ State: exit status 1 ╵ ╷ │ Error: External Program Execution Failed │ │ with module.vpn_module.module.clis.data.external.setup-binaries, │ on .terraform/modules/vpn_module.clis/main.tf line 22, in data "external" "setup-binaries": │ 22: program = ["bash", "${path.module}/scripts/setup-binaries.sh"] │ │ The data source received an unexpected error while attempting to execute │ the program. │ │ Program: /bin/bash │ Error Message: ibmcloud release not found │ │ State: exit status 1

balasgit commented 2 years ago

Resolved the issues as added latest container image