google-cloud-cpp icon indicating copy to clipboard operation
google-cloud-cpp copied to clipboard
verified publisher icon googleapis

IAM samples `GetServiceAccountKey()` key not found

Open dbolduc opened this issue 4 years ago • 11 comments

GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/7eee7d86-f2da-4f19-9049-fdf98158cb78;tab=detail?project=cloud-cpp-testing-resources Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/96e89df122335b7205a70959917c0b1673cad22f/fedora-34-integration-daily/log-7eee7d86-f2da-4f19-9049-fdf98158cb78.txt

2021-09-19T07:04:32.792477443Z [DEBUG] <140176098977792> GetServiceAccountKey() << name: "projects/cloud-cpp-testing-resources/serviceAccounts/[email protected]/keys/ce57700b776f38518d611e783688304e2e300166" public_key_type: TYPE_X509_PEM_FILE  (./google/cloud/internal/log_wrapper.h:86)
2021-09-19T07:04:32.818004400Z [DEBUG] <140176098977792> GetServiceAccountKey() >> status=Service account key ce57700b776f38518d611e783688304e2e300166 does not exist. [NOT_FOUND] (./google/cloud/internal/log_wrapper.h:89)
2021-09-19T07:05:33.820521462Z [INFO] <140176098977792> Enabled logging for gRPC calls (google/cloud/iam/internal/iam_stub_factory.cc:58)
2021-09-19T07:05:33.820621922Z [DEBUG] <140176098977792> GetServiceAccountKey() << name: "projects/cloud-cpp-testing-resources/serviceAccounts/[email protected]/keys/ce57700b776f38518d611e783688304e2e300166" public_key_type: TYPE_X509_PEM_FILE  (./google/cloud/internal/log_wrapper.h:86)
2021-09-19T07:05:33.845223706Z [DEBUG] <140176098977792> GetServiceAccountKey() >> status=Service account key ce57700b776f38518d611e783688304e2e300166 does not exist. [NOT_FOUND] (./google/cloud/internal/log_wrapper.h:89)
terminate called after throwing an instance of 'std::runtime_error'
  what():  Permanent error in GetServiceAccountKey: Service account key ce57700b776f38518d611e783688304e2e300166 does not exist.

https://github.com/googleapis/google-cloud-cpp/blob/96e89df122335b7205a70959917c0b1673cad22f/google/cloud/iam/samples/iam_samples.cc#L602-L608

dbolduc avatar Sep 19 '21 14:09 dbolduc

https://console.cloud.google.com/cloud-build/builds;region=us-east1/f88f7a58-0832-4efe-843a-47e58fd2433a;tab=detail?project=cloud-cpp-testing-resources

dbolduc avatar Nov 11 '21 13:11 dbolduc

GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/04b91df5-2666-421c-9556-f07c3226b6a1;tab=detail?project=cloud-cpp-testing-resources Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/b44055be357e5582092f5a8f3aa530cdaee08147/fedora-34-integration-daily/log-04b91df5-2666-421c-9556-f07c3226b6a1.txt

coryan avatar Dec 03 '21 17:12 coryan

GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/01eeaab9-0ce7-4009-898e-a4daaaee4027;tab=detail?project=cloud-cpp-testing-resources Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/4da3051dc8b90262a9498d2bacf7996173370c56/fedora-34-integration-daily/log-01eeaab9-0ce7-4009-898e-a4daaaee4027.txt

devbww avatar Dec 18 '21 08:12 devbww

GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/8e7298fe-017e-4f0f-9f3e-0ca189fae2e7;tab=detail?project=cloud-cpp-testing-resources Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/a051ecd898c7dd3c43c32e6f5b0aa29672b8f73f/fedora-34-integration-daily/log-8e7298fe-017e-4f0f-9f3e-0ca189fae2e7.txt

coryan avatar Jan 17 '22 15:01 coryan

GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/8e7298fe-017e-4f0f-9f3e-0ca189fae2e7;tab=detail?project=cloud-cpp-testing-resources Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/a051ecd898c7dd3c43c32e6f5b0aa29672b8f73f/fedora-34-integration-daily/log-8e7298fe-017e-4f0f-9f3e-0ca189fae2e7.txt

scotthart avatar Jan 19 '22 15:01 scotthart

GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/8d968a7d-cdd8-485f-b413-d9c63320e983;tab=detail?project=cloud-cpp-testing-resources Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/3289f6aff0449d8789aeb49aca2ed449b62cbb54/fedora-34-integration-daily/log-8d968a7d-cdd8-485f-b413-d9c63320e983.txt

dbolduc avatar Jan 22 '22 17:01 dbolduc

GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/529967ca-553c-4c33-8818-24ac3e8235f6;tab=detail?project=cloud-cpp-testing-resources Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/c2c6fd14cb862a6f0868db00aedbd12744a88cdc/fedora-34-integration-daily/log-529967ca-553c-4c33-8818-24ac3e8235f6.txt

devbww avatar Feb 06 '22 08:02 devbww

I recently learned this:

It can take up to 7 minutes for IAM changes to propagate through the systems.

https://cloud.google.com/iam/docs/faq#access_revoke

Maybe we should make the waiting time even more generous.

coryan avatar May 23 '22 13:05 coryan

  • GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/cd635655-aeef-4eaf-aa68-988eed42ca62;tab=detail?project=cloud-cpp-testing-resources
  • Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/ab81c8ccb87b0074d63e8a0a421e66db97fb7413/fedora-36-integration-daily/log-cd635655-aeef-4eaf-aa68-988eed42ca62.txt

devbww avatar Aug 04 '22 08:08 devbww

  • GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/bb31136d-0c7f-4bf8-9184-efb7da9cde1c;tab=detail?project=cloud-cpp-testing-resources
  • Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/b30c1e19bcb469871c6f03570f6047b043389918/fedora-36-integration-daily/log-bb31136d-0c7f-4bf8-9184-efb7da9cde1c.txt

dbolduc avatar Aug 16 '22 04:08 dbolduc

  • GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/85baee37-de75-4ea9-9d11-a640f12fbf69;tab=detail?project=cloud-cpp-testing-resources
  • Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/a2a34b9cd5b4025e8ca9d68b140db8abe71fc54e/fedora-36-integration-daily/log-85baee37-de75-4ea9-9d11-a640f12fbf69.txt

devbww avatar Aug 19 '22 14:08 devbww

  • GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/3bbdc671-a70a-48c8-945a-673a5acfec7d;tab=detail?project=cloud-cpp-testing-resources
  • Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/eb1d0cce88a06752f4cddd36b42f2c315ed43b1f/fedora-36-integration-daily/log-3bbdc671-a70a-48c8-945a-673a5acfec7d.txt

coryan avatar Nov 08 '22 16:11 coryan 

FAIL: //google/cloud/iam:samples_iam_samples ...
    :
google::cloud::Status thrown: NOT_FOUND: Permanent error in GetServiceAccountKey: Service account key 3c827f320128c301a4c2aae3d9d4a77e06c36e2a does not exist.
    :
Step #3: 2023-01-13T08:22:07.696055955Z [DEBUG] <139816750563008> CreateServiceAccountKey() << google.iam.admin.v1.CreateServiceAccountKeyRequest {
Step #3:   name: "projects/-/serviceAccounts/[email protected]"
Step #3:   private_key_type: TYPE_GOOGLE_CREDENTIALS_FILE
Step #3:   key_algorithm: KEY_ALG_RSA_2048
Step #3: } (./google/cloud/internal/log_wrapper.h:80)
Step #3: 2023-01-13T08:22:08.165182429Z [DEBUG] <139816750563008> CreateServiceAccountKey() >> response=google.iam.admin.v1.ServiceAccountKey {
Step #3:   name: "projects/cloud-cpp-testing-resources/serviceAccounts/[email protected]/keys/3c827f320128c301a4c2aae3d9d4a77e06c36e2a"
Step #3:   private_key_type: TYPE_GOOGLE_CREDENTIALS_FILE
Step #3:   key_algorithm: KEY_ALG_RSA_2048
Step #3:   private_key_data: "{\n  \"type\": \"service_account\",\n  \"project_id\": \"cloud-cpp-testing-resources\",\n  \"private_key_id\": \"3c827f320128c301a4c2aae3d9d4a77e06c36e2a\",\n  \"private_key\": \"-----BEGIN PRIVATE KEY----- ...<truncated>..."
Step #3:   valid_after_time {
Step #3:     "2023-01-13T08:22:07Z"
Step #3:   }
Step #3:   valid_before_time {
Step #3:     "2023-04-13T08:22:07Z"
Step #3:   }
Step #3:   key_origin: GOOGLE_PROVIDED
Step #3:   key_type: USER_MANAGED
Step #3: } (./google/cloud/internal/log_wrapper.h:86)
    :
Step #3: 2023-01-13T08:22:08.173989512Z [DEBUG] <139816750563008> GetServiceAccountKey() << google.iam.admin.v1.GetServiceAccountKeyRequest {
Step #3:   name: "projects/cloud-cpp-testing-resources/serviceAccounts/[email protected]/keys/3c827f320128c301a4c2aae3d9d4a77e06c36e2a"
Step #3:   public_key_type: TYPE_X509_PEM_FILE
Step #3: } (./google/cloud/internal/log_wrapper.h:80)
Step #3: 2023-01-13T08:22:08.308992443Z [DEBUG] <139816750563008> GetServiceAccountKey() >> status=NOT_FOUND: Service account key 3c827f320128c301a4c2aae3d9d4a77e06c36e2a does not exist. (./google/cloud/internal/log_wrapper.h:83)
Step #3: terminate called after throwing an instance of 'google::cloud::v2_7_0::Status'
  • GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/2987955a-ca59-42cf-8c6c-f282d1a88102;tab=detail?project=cloud-cpp-testing-resources
  • Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/ae902b8e2c076a0edfebad3a3f2fee6b1507333c/fedora-36-bazel-integration-daily/log-2987955a-ca59-42cf-8c6c-f282d1a88102.txt

devbww avatar Jan 13 '23 08:01 devbww

  • GCB: https://console.cloud.google.com/cloud-build/builds;region=us-east1/6ed279d9-a793-4a4c-8207-cb14d60a0683;tab=detail?project=cloud-cpp-testing-resources
  • Raw: https://storage.googleapis.com/cloud-cpp-community-publiclogs/logs/google-cloud-cpp/main/00cbfcb02a93e539279a9e0f999b5c711bc62cea/fedora-36-bazel-integration-daily/log-6ed279d9-a793-4a4c-8207-cb14d60a0683.txt

devbww avatar Jan 16 '23 08:01 devbww