Open drnic opened 5 years ago
I've guessed my way so far to:
svcat provision spanner-db -n sb-demo --class cloud-spanner --plan beta --params-json '{"displayName":"my-spanner","instanceId":"d3d3e4-18f4-4d53"}'
Current error is now Resource projects/knative-experiments/instances/d3d3e4-18f4-4d53 is missing IAM permission: spanner.instances.setIamPolicy
Warning ProvisionCallFailed 3s service-catalog-controller-manager Provision call failed: operation "projects/491089609225/operations/a15585a3-d356-11e8-b517-0a580a100221/1539922966831069154" failed: generic::invalid_argument: Operation "operation-1539922967227-5788d41716a79-f114bcbd-94794d36" failed with
: [{"code":"RESOURCE_ERROR","location":"/deployments/i496cc442-ca37-4a75-824d-e4caaf07801f/resources/instance","message":"{\"ResourceType\":\"gcp-types/spanner-v1:projects.instances\",\"ResourceErrorCode\":\"403\",\"ResourceErrorMessage\":{\"code\":403,\"message\":\"Resource projects/knative-experiments/instances/d3d3e4-18f4-4d53 is missing IAM permission: spanner.instances.setIamPolicy.\",\"status\":\"PERMISSION_DENIED\",\"statusMessage\":\"Forbidden\",\"requestPath\":\"https://spanner.googleapis.com/v1/projects/knative-experiments/instances/d3d3e4-18f4-4d53:setIamPolicy\",\"httpMethod\":\"POST\"}}"}]
I get the exact same error following this example https://github.com/GoogleCloudPlatform/kubernetes-engine-samples/tree/master/service-catalog/cloud-spanner#before-you-begin. I'm guessing I've missed enabling an API but not sure which one.
Please read through the information regarding service account usage while using the GCP Broker: https://github.com/GoogleCloudPlatform/kubernetes-engine-samples/tree/master/service-catalog#application-service-account
And look through these instructions: https://github.com/GoogleCloudPlatform/k8s-service-catalog/issues/223#issuecomment-473222539
I tried the following:
But it never exits. When I look at the events for the resource I see:
What is an example
svcat provision
command to provision spanner or other services?