Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Race condition when creating GCP service accounts for Fulcio #615

Open
znewman01 opened this issue Apr 25, 2023 · 1 comment
Open

Race condition when creating GCP service accounts for Fulcio #615

znewman01 opened this issue Apr 25, 2023 · 1 comment
Labels
bug Something isn't working

Comments

@znewman01
Copy link

@therealnb reported (in Sigstore Office Hours today) an issue where the Fulcio service account wasn't ready on the initial run. On a re-run it succeeded.

This points to a race condition or need for retries.

@therealnb, please chime in with any details you can provide 🙂
@znewman01 znewman01 added the bug Something isn't working label Apr 25, 2023
@therealnb
Copy link
Contributor 

Error from server (Forbidden): error when creating "STDIN": pods "redis" is forbidden: error looking up service account rekor-system/default: serviceaccount "default" not found

When I looked - it was there. Retry worked.

I think I followed the instructions. This machine never had kind on it before. I did create one default cluster then deleted it before I ran the scaffold scripts. I don't think that would have mattered.

$ kind version
kind v0.18.0 go1.20.3 darwin/amd64

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@znewman01 @therealnb