Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Datastream api service account is not getting created automatically while using project-factory version 16.0.0 #952

Open
Ranagcp opened this issue Nov 13, 2024 · 1 comment
Labels
bug Something isn't working

Comments

@Ranagcp
Copy link

Ranagcp commented Nov 13, 2024

TL;DR

We encounterred an issue during project factory version upgrade from 12.0.0 to 16.0.0.
Terraform Apply gets failed with error: Error 400: sevice account service-××××@gcp-sa-datastream.iam.gseviceaccount.com does not exist.
Internally roles/ compute.NetworkUser gets assigned to this account but this account doesnot exists and it produce this error.
Raised case to google support team and they also found same issue and redirected to work with community here . datastream api is enabled but it does not create service account automatically.
We tried creating service account explicitly in the project but it failes with same error during terrafor Apply But when we rerun plan after 10-15 minutes it gets ressolved automatically.

Expected behavior

If datastreamapi is enabled then assoiciated service account should get created automatically.

Observed behavior

Datastream service identity is not getting created while using project factory version 14.5.0 or 15.0.0 or 16.0.0.

Terraform Configuration

terraform{
Required_providers{
google = {
Version = ">=4.5"
Source=" hashicorp/google"
}
google_beta = {
Version = ">=4.5"
Source =" hashicorp/google-beta"
}

Terraform Version

1.6.5

Additional information

No response

@Ranagcp Ranagcp added the bug Something isn't working label Nov 13, 2024
@rafitadiaz
Copy link

rafitadiaz commented Nov 18, 2024

I would even ask... Why those users needs to be created?

So we have a setup with a nethost project and 50+ service projects.

From those just one has a datastream API enabled to sync some data between MySQL and Bigquery.

Why should we have a datastream user or why should we enable this API in the other 49 projects?

For me the expected behavior is just to grant NetworkUser just for the datastream user in that project.

And for the rest of the projects just if we decide to enable the API.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants