Google Cloud CloudSQL实例无法使用带有错误的Terraform提供商创建“每个产品人为标题服务”帐户。

Question

我们正在尝试使用具有私有IP的Google-Beta提供商来部署云SQL（MSSQL）实例，大约四到五分钟后，它失败并引发了错误 ”错误等待创建实例： - 未找到“ ”的人为项目的服务帐户，

我能够通过Cloud Shell CLI并在控制台中手动创建一个云SQL实例。

有人以前遇到过这个问题吗？

如果您查看控制台中错误的资源，它似乎主要创建，但显示了此错误。

resource "google_sql_database_instance" "cloud_sql_instance" {

  provider = google-beta

  name             = var.cloud_sql_instance_name
  region           = var.gcp_region
  database_version = var.cloud_sql_version
  root_password    = "wearenothardcodingplaceholdertest"
  deletion_protection = var.delete_protection_enabled
  project         = var.gcp_project


  settings {
    tier = var.cloud_sql_compute_tier
    availability_type = var.cloud_sql_availibility_type
    collation = var.cloud_sql_collation
    disk_autoresize = var.cloud_sql_auto_disk_resize
    disk_type = var.cloud_sql_disk_type

    active_directory_config {
      domain = var.active_directory_domain
    }

    backup_configuration {
      enabled = var.cloud_sql_backup_enabled
      start_time = var.cloud_sql_backup_starttime
      point_in_time_recovery_enabled = var.cloud_sql_pitr_enabled
      transaction_log_retention_days = var.cloud_sql_log_retention_days

      backup_retention_settings {
        retained_backups = var.cloud_sql_backup_retention_number
        retention_unit = var.cloud_sql_backup_retention_unit
      }

    }

    ip_configuration {
      ipv4_enabled    = var.cloud_sql_backup_public_ip
      private_network = data.google_compute_network.vpc_connection.self_link
      require_ssl = var.cloud_sql_backup_require_ssl
      allocated_ip_range = var.cloud_sql_ip_range_name
    }

    maintenance_window {
      day = var.cloud_sql_patch_day
      hour = var.cloud_sql_patch_hour
      update_track = "stable"
    }

  }
}

Answer 1

我只是遇到了这个问题。您需要为sqladmin.googleapis.com创建服务身份。

resource "google_project_service_identity" "cloudsql_sa" {
  provider = google-beta

  project = "cool-project"
  service = "sqladmin.googleapis.com"
}