About gnezdo

gnezdo · 03-29-2024

I set up a GCP project and the VMs in it use OS policies for configuration management. This works great with the default service account that's created with my GCE project. Now I want to have a distinct service account and use it for the VMs that hav...

gnezdo

The answer to my "minimal network access" questions is likely:If your VM is running within a private VPC network and does not have public internet access, check that you have enabled Private Google Access.According to the docs.

gnezdo

These permissions don't seem to be required. The service account only has roles/viewer now and that's enough for osconfig to work (though maybe too much).

gnezdo

I feel bad now. I was confused about the configuration of two similar VMs. One of which does have an external IP. I just realized that the other one that I was trying to set up did not have access to the internet. Now that I enabled external network ...

gnezdo

Thanks @lawrencenelson. I don't think this worked. Despite having the roles listed below I'm still seeing the original error `Error main.go:88: context deadline exceeded` on the newly created VM:```$ gcloud projects get-iam-policy PROJECT --format js...

gnezdo

Yes, it does have an external IP assigned.

My Stats

valentiniacov's Bio

Badges gnezdo Earned

Recent Activity

OSConfigAgent Error main.go:88: context deadline exceeded

Re: OSConfigAgent Error main.go:88: context deadline exceeded

Re: OSConfigAgent Error main.go:88: context deadline exceeded

Re: OSConfigAgent Error main.go:88: context deadline exceeded

Re: OSConfigAgent Error main.go:88: context deadline exceeded

Re: OSConfigAgent Error main.go:88: context deadline exceeded