CCG Custom Plugin Returning Error (The remote procedure call failed.)

[srinivas-kujala]

Describe the bug Setting up custom ccg plugin on my local machine to run windows containers as non-domain joined failing with RPC error.

To Reproduce Steps to reproduce the behavior:

1. Downloaded gmsa-ccg-plugin project
2. Build solution in release mode.
3. Register plugin using following script install-gmsaplugin.zip
4. Run docker command docker run --security-opt "credentialspec=file://servereps_gmsaplugin.json" --hostname webapp01 -it mcr.microsoft.com/windows/server:ltsc2022 powershell
5. Output docker: Error response from daemon: hcs::CreateComputeSystem f8a7b59bca075e1afea0a808f725bf1468f8ad163d1889bc98c1dd3775b8302f: winapi error #3489792023.

Expected behavior

• Windows container should authenticate with remote domain and start up.

Configuration:

• Edition: Windows 11
  • Base Image being used: mcr.microsoft.com/windows/servercore:ltsc2022, mcr.microsoft.com/windows/server:ltsc2022
• Container engine: docker
• Container Engine version 27.2.0

Additional context

[github-actions[bot]]

Thank you for creating an Issue. Please note that GitHub is not an official channel for Microsoft support requests. To create an official support request, please open a ticket here. Microsoft and the GitHub Community strive to provide a best effort in answering questions and supporting Issues on GitHub.

[ntrappe-msft]

@srinivas-kujala Thanks for calling our attention to this error. The issue has been brought up to the team that owns CCG. We'll update this when we have something to share.

[srinivas-kujala]

@ntrappe-msft, thank you for acknowledging my request. Awaiting next steps.

Thanks

[srinivas-kujala]

@ntrappe-msft , do we have any update on this issue from CCG team?

[ntrappe-msft]

@srinivas-kujala Hi, I just pinged the thread again. I'll share an update when they respond. Thanks!

[ntrappe-msft]

Would you mind opening a ticket with Microsoft support? The CCG team prefers to go through the official mechanisms.

[srinivas-kujala]

@ntrappe-msft , I tried to create a ticket but I keeps signing me out.

[ntrappe-msft]

Huh, that's weird? Can I ask what browser you're using? I just tested it on Safari + Firefox and it works for me. You might want to try and (1) clear your cache or (2) login to another Microsoft page, then retry the Services Hub one.

[srinivas-kujala]

@ntrappe-msft , I've cleared cache tried chrome on windows laptop and safari on mobile. No luck

[Raphael-kainos]

I am currently experiencing a similar issue with an AKS cluster configured with gMSA and utilizing the pre-installed aksasv plugin. Upon connecting to the Windows node via RDP and examining the logs, I observed the following output. It seems related to @srinivas-kujala issue.

I have confirmed that the GMSACredentialSpec (or credentialspec) configuration is accurate, with particular attention to the PluginInput field within the HostAccountConfig section.

Edition: Microsoft Windows Server 2019 Datacenter Base Image being used: mcr.microsoft.com/windows/servercore/iis:windowsservercore-ltsc2019

Also @ntrappe-msft I also cant access this page to raise a ticket

[srinivas-kujala]

@ntrappe-msft , looks like we are unable to raise the ticket. Is there anything else we can do to get some help. I see others are facing same issue. The error message doesn't give any clue for us to even troubleshoot from our end we are stuck.

hordurmarhafsteinsson Raphael-kainos

[ntrappe-msft]

I would normally tell you to use the Support troubleshooter but that isn't working either 🙃. Give me a few days to figure out how to raise this Issue & what's going wrong with our Support page.

[Raphael-kainos]

I would normally tell you to use the Support troubleshooter but that isn't working either 🙃. Give me a few days to figure out how to raise this Issue & what's going wrong with our Support page.

Services Hub one Started working yesterday for me, I have raised a ticket.

[ntrappe-msft]

Oh sweet! If you don't get a response in a week, let me know. I can try to put more pressure on that ticket.

[srinivas-kujala]

@ntrappe-msft, should I be raising another ticket?