Closed matthewfischer closed 5 years ago
We have created an issue in Pivotal Tracker to manage this. Unfortunately, the Pivotal Tracker project is private so you may be unable to view the contents of the story.
The labels on this github issue will be updated when the story is started.
That's odd. We set destination target to be the service account: https://github.com/pivotal-cf/terraforming-gcp/blob/b99033bce0a62a84a82c3226b980bca2290ecd5c/terraforming-pas/main.tf#L138
Are you configuring the Ops Manager with the output opsman_service_account
or selecting the Instance profile?
To remove the BOSH Director public IP I believe you have to configure Resource config
in Ops Manager and uncheck the internet
box.
I think I did the service account wrong, I used the one that I passed into terraform. I will retest and let you know.
Yep this was my fault.
I ran into this issue too and it makes sense to use the ops manager service account. Can we update the Internetless readme section to call out that "The Ops Manager VM Service Account" is required for internetess.
If you setup with internetless=true your deploy will fail trying to talk to google services (for example):
This I think is because we've blocked all egress to 0.0.0.0/0 and given it a public IP. Google Private access does not work with a public IP.