Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can not provision IBM service with a service id #98

Closed
qibobo opened this issue Mar 11, 2020 · 10 comments
Closed

Can not provision IBM service with a service id #98

qibobo opened this issue Mar 11, 2020 · 10 comments
Assignees
Labels

Comments

@qibobo
Copy link
Contributor

qibobo commented Mar 11, 2020

I used a IBM cloud service id(Administrator role)'s apikey to provision a service by using cloud-operator the latest release, the error threw:
Request failed with status code: 400, BXNIM0106E: Validation of property 'response_type' with value '[uaa, cloud_iam]' failed. Valid values: 'cloud_iam, delegated_refresh_token'

I have verified that with the service id's api key, I can successfully provision service by using ibmcloud cli.
So does cloud-operator support service id?

@qibobo
Copy link
Contributor Author

qibobo commented Mar 11, 2020

Seems the similar issue in terraform-provider-ibm IBM-Cloud/terraform-provider-ibm#591
The root cause is the old version of bluemix-go.

@dwakeman
Copy link

I need to be able to use service IDs as well, and I am very interested in the resolution of this issue.

Thanks!

@qibobo
Copy link
Contributor Author

qibobo commented Mar 13, 2020

@vazirim
Any updates?

@vazirim
Copy link
Member

vazirim commented Mar 13, 2020

@qibobo I am unable to reproduce this problem. It works for me.
Can you please retry and see if you still have the problem (it could be that bluemix was not cooperating when you last tried this)?

@dwakeman Did you try using a serviceid and it didn't work?

@dwakeman
Copy link

No, just happened to be viewing the issues list and saw this. I will test it out.

@vazirim
Copy link
Member

vazirim commented Mar 13, 2020

All you need is for your seed-secret to contain the api-key of the serviceId, and to give it proper access permissions in iam.

@qibobo
Copy link
Contributor Author

qibobo commented Mar 16, 2020

@vazirim
When I used the latest version(v1.0.5), I still can not provision service successfully. Now the error is Request failed with status code: 400, ServerErrorResponse: {"message":"The resource group 0000161cdb364e489a09f7f971a34363 is inactive with state: SUSPENDED","status_code":400,"transaction_id":"bss-5a2dc634bdce8422"}
I have tried serval times and it always failed with the same error.

And I have manually checked my service id could provision service.

@vazirim
Copy link
Member

vazirim commented Mar 16, 2020

The latest release does not address this issue.

That is also the error that I see. I have been looking at the ibmcloud cli to see what they are doing differently. They are using a different library for starters (ibmcloud-cli-sdk) instead of bluemixgo. In the long run we need to understand which library to use. In the shorter term, I will try to find out what REST calls need to happen on IAM and do those directly, bypassing bluemixgo. Please don't expect a rapid fix for this.

@vazirim
Copy link
Member

vazirim commented Mar 18, 2020

Fixed in v0.1.6

@vazirim vazirim added the done label Mar 18, 2020
@qibobo
Copy link
Contributor Author

qibobo commented Mar 19, 2020

It works now. Thank you!

@qibobo qibobo closed this as completed Mar 19, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants