Re: Anthos VMware Installation problem.

ndefreitas · 11-18-2024 04:31 PM

We are installing anthos for vmware 1.30.200-gke.101..

everything seems to work fine but at the end checking the events I get this problem:

2024/11/18 13:19:06.920102 dialer.go:276: dialer: dial: connection to europe-west4-gkeconnect.googleapis.com:443 failed after 78.302585ms: serve: egress call failed: rpc error: code = Unauthenticated desc = transport: per-RPC creds failed due to error: error in exchanging token, got status code: 400, body: "{\"error\":\"invalid_grant\",\"error_description\":\"Failed to verify JWT signature.\"}", response: &{400 Bad Request 400 HTTP/2.0 2 0 map[Alt-Svc:[h3=":443"; ma=2592000,h3-29=":443"; ma=2592000] Cache-Control:[private] Content-Type:[application/json; charset=UTF-8] Date:[Mon, 18 Nov 2024 13:19:06 GMT] Server:[scaffolding on HTTPServer2] Vary:[Origin X-Origin Referer] X-Content-Type-Options:[nosniff] X-Frame-Options:[SAMEORIGIN] X-Xss-Protection:[0]] 0xc0009291d0 -1 [] false true map[] 0xc000854500 0xc0008eb2c0}

we have seen that the secret where the json of the service account is in the installation process leaves it empty:

apiVersion: v1

data:

creds-gcp.json: ""

kind: Secret

metadata:

creationTimestamp: "2024-11-18T13:04:38Z"

name: creds-gcp

namespace: gke-connect

resourceVersion: "6185"

uid: 27847de4-f657-4146-85ef-f4ba842d3a66

I am new to anthos and I want to learn. I can't get it to work properly.

thanks a lot...

Regards

Nelson.

francislouie

Hi @ndefreitas,

Welcome to Google Cloud Community!

Based on the error that you provided, it is most likely a misconfiguration in the Service account setup.

Here are some troubleshooting steps:

Verify the Service Account and keys
Verify if you downloaded a JSON key for your component access service account and updated creds-gcp Secret.
Verify if you have done IAM-Policy-Binding for your service account

For further reference, please see below documentations:

If the issue still persists and needs further assistance, please feel free to reach out to the google support team.

I hope the above information is helpful.

devenes

As @francislouie mentioned, please manually review your secret keys and JSON files to ensure they are correctly configured. Additionally, verify in the Google Cloud IAM console that the appropriate roles have been assigned to the service account.