Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GCP gen-ca doesn't work anymore #62

Open
peterj opened this issue Aug 9, 2021 · 0 comments
Open

GCP gen-ca doesn't work anymore #62

peterj opened this issue Aug 9, 2021 · 0 comments

Comments

@peterj
Copy link
Contributor

peterj commented Aug 9, 2021

I think the naming format for the resource has changed.

If I use the following as CA name: "projects/my-project-name/locations/us-west1/certificateAuthorities/20210809-46c-fh8" the getmesh gen-ca command fails with:

unable to issue CA, due to error: unable to create GCP certificate: rpc error: code = NotFound desc = Requested entity was not found.

It looks like a concept of caPools was introduced - here's the full resource name of the CA I created in GCP:

projects/my-project-name/locations/us-west1/caPools/istio-tetratelabs-io/certificateAuthorities/20210809-46c-fh8

However, if I try to use the above format, getmesh fails again (different error):

unable to issue CA, due to error: unable to create GCP certificate: rpc error: code = InvalidArgument desc = Malformed collection name: 'caPools/certificateAuthorities/certificates'

I am assuming this is because getmesh still uses the v1beta version of the API/protos. Perhaps we should migrate to v1 of the privateca api.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant