Closed Pascal-Orthopy closed 2 years ago
I have found a more Detailed error entry, seems like i missed some Role settings?
[[CreateNodeVM.DoError] Expected HTTP response code [200 201 202 203 204] when accessing [POST https://ecs.eu-de.otc.t-systems.com/....], but got 400 instead {"error":{"message":"Failed to check the role of kms.{\"error\":{\"code\":\"EVS.2044\",\"message\":\"Failed to check the role of kms.\"}}","code":"Ecs.0025"}}, [InstallNode.DoError] [Install.Dependency] creating node machine failed]
So i fond the Problem, our "Agency" declaration was not correct, we missed the "project_role" settings
resource "opentelekomcloud_identity_agency_v3" "agency" {
name = "EVSAccessKMS"
description = "CCE Node Encryption Agency"
delegated_domain_name = "op_svc_evs"
domain_roles = ["KMS Administrator",]
project_role {
project = "eu-de"
roles = ["KMS Administrator",]
}
}
This has fixed the cluster nodes.
Hello all,
first of all thank you for these great terraform modules, they are really helpful.
But i have a question, we are trying to encrypt the CCE Node Storage, but when we are set up the configuration and agency for this feature, our nodes cannot start. Could it be that we forgot some settings or is there some documentation somewhere on how to set up encryption for the nodes?
Here is our CCE and Agency declaration:
With this setting we get the following errors in our OTC console:
and in the cluster we get these errors:
The agency and encryption keys are created.