DISHA98 LODHA
DISHA98 LODHA

Reputation: 95

ERROR: (gcloud.container.clusters.create) ResponseError: code=400, message=Failed

Hi I am getting following error

ERROR: (gcloud.container.clusters.create) ResponseError: code=400, message=Failed precondition when calling the ServiceConsumerManager: tenantmanager::185014: Consumer 370525719069 should enable service:container.googleapis.com before generating a service account.

can someone help me ?

Upvotes: 5

Views: 6361

Answers (2)

Overbryd
Overbryd

Reputation: 5006

This error occurred when trying to create a Google Kubernetes Cluster on a Shared VPC. The Shared VPC host project was missing the container.googleapis.com API activation.

Activate the container.googleapis.com API on the Shared VPC host project to solve this issue.

Upvotes: 5

Malgorzata
Malgorzata

Reputation: 7031

You should enable API service - container.googleapis.com, execute command:

$ gcloud services enable container.googleapis.com

Please take a look at this intorduction especially: environment setup and cluster creation on GKE.

See more: gcp-enabling-disabling-services, troubleshooting-enabling-gcp-services, enabling-gcp-services-example.

Another option:

It hard to answer due to lack of important additional information (e.g. environment )but such error may indicate that you are working on some kind of multi-tenancy environment. Make sure that you have proper rights to create new clusters:

Assign roles using IAM
You can control access to Google Cloud resources through IAM policies. Start by identifying the groups needed for your organization and their scope of operations, then assign the appropriate IAM role to the group. Use Google Groups to efficiently assign and manage IAM for users.

See: enterprise-multitenancy-roles.

Also take a look on best practices how to set up multi-tenant-cluster-gke-enterprise.

Upvotes: 19

Related Questions