Closed pwschuurman closed 3 months ago
/assign @Sneha-at
Failed with:
[38;5;243m/home/prow/go/src/sigs.k8s.io/gcp-compute-persistent-disk-csi-driver/test/e2e/tests/single_zone_e2e_test.go:715[0m
[38;5;9m[FAILED] CreateVolume failed with error: rpc error: code = InvalidArgument desc = CreateVolume failed: rpc error: code = InvalidArgument desc = CreateVolume failed to create single zonal disk gcepd-csi-e2e-2ee8c344-aab9-42c0-8ba2-6aaffc3d24ab: failed to insert zonal disk: unknown Insert disk error: googleapi: Error 400: Cloud KMS error when using key projects/k8s-infra-e2e-boskos-062/locations/global/keyRings/gce-pd-csi-test-ring/cryptoKeys/test-key-1c952bf4-c58c-4b41-9993-1102071d948b: Permission 'cloudkms.cryptoKeyVersions.useToEncrypt' denied on resource 'projects/k8s-infra-e2e-boskos-062/locations/global/keyRings/gce-pd-csi-test-ring/cryptoKeys/test-key-1c952bf4-c58c-4b41-9993-1102071d948b' (or it may not exist)., kmsPermissionDenied%!v(MISSING)
Expected
<*status.Error | 0xc00012f4d0>:
rpc error: code = InvalidArgument desc = CreateVolume failed: rpc error: code = InvalidArgument desc = CreateVolume failed to create single zonal disk gcepd-csi-e2e-2ee8c344-aab9-42c0-8ba2-6aaffc3d24ab: failed to insert zonal disk: unknown Insert disk error: googleapi: Error 400: Cloud KMS error when using key projects/k8s-infra-e2e-boskos-062/locations/global/keyRings/gce-pd-csi-test-ring/cryptoKeys/test-key-1c952bf4-c58c-4b41-9993-1102071d948b: Permission 'cloudkms.cryptoKeyVersions.useToEncrypt' denied on resource 'projects/k8s-infra-e2e-boskos-062/locations/global/keyRings/gce-pd-csi-test-ring/cryptoKeys/test-key-1c952bf4-c58c-4b41-9993-1102071d948b' (or it may not exist)., kmsPermissionDenied%!v(MISSING)
{
s: {
s: {
state: {
NoUnkeyedLiterals: {},
DoNotCompare: [],
DoNotCopy: [],
atomicMessageInfo: nil,
},
sizeCache: 0,
unknownFields: nil,
Code: 3,
Message: "CreateVolume failed: rpc error: code = InvalidArgument desc = CreateVolume failed to create single zonal disk gcepd-csi-e2e-2ee8c344-aab9-42c0-8ba2-6aaffc3d24ab: failed to insert zonal disk: unknown Insert disk error: googleapi: Error 400: Cloud KMS error when using key projects/k8s-infra-e2e-boskos-062/locations/global/keyRings/gce-pd-csi-test-ring/cryptoKeys/test-key-1c952bf4-c58c-4b41-9993-1102071d948b: Permission 'cloudkms.cryptoKeyVersions.useToEncrypt' denied on resource 'projects/k8s-infra-e2e-boskos-062/locations/global/keyRings/gce-pd-csi-test-ring/cryptoKeys/test-key-1c952bf4-c58c-4b41-9993-1102071d948b' (or it may not exist)., kmsPermissionDenied%!v(MISSING)",
Details: nil,
},
},
}
to be nil[0m
[38;5;9mIn [1m[It]
prow-build SA has the right permissions, but the default compute SA does not: https://cloud.google.com/kms/docs/reference/permissions-and-roles#cloudkms.cryptoKeyEncrypterDecrypter
/retest
/lgtm /approve
thanks!
/lgtm /approve
[APPROVALNOTIFIER] This PR is APPROVED
This pull-request has been approved by: mattcary, pwschuurman, Sneha-at
The full list of commands accepted by this bot can be found here.
The pull request process is described here
/retest
/retest
What type of PR is this? /kind cleanup
What this PR does / why we need it: Error message is currently being printed out as a byte array (%v). It should be printed out as a string (%s). This is done elsewhere
exec.CombinedOutput()
is parsed.Current error message is formatted like:
This should be:
Special notes for your reviewer: This was discovered when debugging the issue for #1760
Does this PR introduce a user-facing change?: