{"action":"closed","issue":{"url":"https://api.github.com/repos/kubernetes/ingress-gce/issues/49","repository_url":"https://api.github.com/repos/kubernetes/ingress-gce","labels_url":"https://api.github.com/repos/kubernetes/ingress-gce/issues/49/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/ingress-gce/issues/49/comments","events_url":"https://api.github.com/repos/kubernetes/ingress-gce/issues/49/events","html_url":"https://github.com/kubernetes/ingress-gce/issues/49","id":264748139,"number":49,"title":"GLBC: Ingress can't be properly created: Insufficient Permission","user":{"login":"bowei","id":837034,"avatar_url":"https://avatars1.githubusercontent.com/u/837034?v=4","gravatar_id":"","url":"https://api.github.com/users/bowei","html_url":"https://github.com/bowei","followers_url":"https://api.github.com/users/bowei/followers","following_url":"https://api.github.com/users/bowei/following{/other_user}","gists_url":"https://api.github.com/users/bowei/gists{/gist_id}","starred_url":"https://api.github.com/users/bowei/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bowei/subscriptions","organizations_url":"https://api.github.com/users/bowei/orgs","repos_url":"https://api.github.com/users/bowei/repos","events_url":"https://api.github.com/users/bowei/events{/privacy}","received_events_url":"https://api.github.com/users/bowei/received_events","type":"User","site_admin":false},"labels":[{"id":717014317,"url":"https://api.github.com/repos/kubernetes/ingress-gce/labels/backend/gce","name":"backend/gce","color":"ededed","default":false}],"state":"closed","locked":false,"assignee":{"login":"nicksardo","id":184976,"avatar_url":"https://avatars0.githubusercontent.com/u/184976?v=4","gravatar_id":"","url":"https://api.github.com/users/nicksardo","html_url":"https://github.com/nicksardo","followers_url":"https://api.github.com/users/nicksardo/followers","following_url":"https://api.github.com/users/nicksardo/following{/other_user}","gists_url":"https://api.github.com/users/nicksardo/gists{/gist_id}","starred_url":"https://api.github.com/users/nicksardo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nicksardo/subscriptions","organizations_url":"https://api.github.com/users/nicksardo/orgs","repos_url":"https://api.github.com/users/nicksardo/repos","events_url":"https://api.github.com/users/nicksardo/events{/privacy}","received_events_url":"https://api.github.com/users/nicksardo/received_events","type":"User","site_admin":false},"assignees":[{"login":"nicksardo","id":184976,"avatar_url":"https://avatars0.githubusercontent.com/u/184976?v=4","gravatar_id":"","url":"https://api.github.com/users/nicksardo","html_url":"https://github.com/nicksardo","followers_url":"https://api.github.com/users/nicksardo/followers","following_url":"https://api.github.com/users/nicksardo/following{/other_user}","gists_url":"https://api.github.com/users/nicksardo/gists{/gist_id}","starred_url":"https://api.github.com/users/nicksardo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nicksardo/subscriptions","organizations_url":"https://api.github.com/users/nicksardo/orgs","repos_url":"https://api.github.com/users/nicksardo/repos","events_url":"https://api.github.com/users/nicksardo/events{/privacy}","received_events_url":"https://api.github.com/users/nicksardo/received_events","type":"User","site_admin":false}],"milestone":null,"comments":35,"created_at":"2017-10-11T21:52:37Z","updated_at":"2017-10-11T21:53:19Z","closed_at":"2017-10-11T21:53:19Z","author_association":"MEMBER","body":"_From @bbzg on July 16, 2017 11:36_\n\nI recently upgraded to kubernetes 1.7 with RBAC on GKE, and I am seeing this problem:\r\n\r\n```\r\n  FirstSeen\tLastSeen\tCount\tFrom\t\t\tSubObjectPath\tType\t\tReason\t\tMessage\r\n  ---------\t--------\t-----\t----\t\t\t-------------\t--------\t------\t\t-------\r\n  6h\t\t6m\t\t75\tloadbalancer-controller\t\t\tWarning\t\tGCE :Quota\tgoogleapi: Error 403: Insufficient Permission, insufficientPermissions\r\n```\r\n\r\nI have double-checked my quotas, and they are all green.\r\n\r\nI have also tried granting the Node service account `Project > Editor` permissions, and I have added the Node service account to the `cluster-admin` ClusterRole, just in case it had anything to do with that (which it should not, right?).\r\n\r\nGKE Cluster logs (slightly redacted):\r\n\r\n```\r\n{\r\n insertId:  \"x\"   \r\n jsonPayload: {\r\n  apiVersion:  \"v1\"    \r\n  involvedObject: {\r\n   apiVersion:  \"extensions\"     \r\n   kind:  \"Ingress\"     \r\n   name:  \"ingress-testing\"     \r\n   namespace:  \"default\"     \r\n   resourceVersion:  \"425826\"     \r\n   uid:  \"x\"     \r\n  }\r\n  kind:  \"Event\"    \r\n  message:  \"googleapi: Error 403: Insufficient Permission, insufficientPermissions\"    \r\n  metadata: {\r\n   creationTimestamp:  \"2017-07-15T12:54:37Z\"     \r\n   name:  \"ingress-testing.x\"     \r\n   namespace:  \"default\"     \r\n   resourceVersion:  \"53520\"     \r\n   selfLink:  \"/api/v1/namespaces/default/events/ingress-testing.14d1822c5ed30595\"     \r\n   uid:  \"x\"     \r\n  }\r\n  reason:  \"GCE :Quota\"    \r\n  source: {\r\n   component:  \"loadbalancer-controller\"     \r\n  }\r\n  type:  \"Warning\"    \r\n }\r\n logName:  \"projects/x/logs/events\"   \r\n receiveTimestamp:  \"2017-07-15T19:11:59.117152623Z\"   \r\n resource: {\r\n  labels: {\r\n   cluster_name:  \"app-cluster\"     \r\n   location:  \"\"     \r\n   project_id:  \"x\"     \r\n  }\r\n  type:  \"gke_cluster\"    \r\n }\r\n severity:  \"WARNING\"   \r\n timestamp:  \"2017-07-15T19:11:54Z\"   \r\n}\r\n```\r\n\r\nI have tried figuring out what the cause might be, but have not found anything that was applicable.\r\n\r\nWhat can I do to get Ingress working again in my cluster?\r\n\r\nThanks!\n\n_Copied from original issue: kubernetes/ingress-nginx#975_"}}
{"actor":{"display_login":"bowei"}}