• Kubernetes Submit Queue's avatar
    Merge pull request #51562 from nicksardo/gce-attempt-firewall · 1732a8b9
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 51915, 51294, 51562, 51911)
    
    GCE: Gracefully handle permission errors when attempting to create firewall rules
    
    Purpose of this PR is to raise events from the GCE cloud provider if the GCE service account does not have the permissions necessary to create/update/delete firewall rules. 
    
    Fixes #51812
    
    **Release note**:
    ```release-note
    NONE
    ```
    
    Example Events:
    
    ```
    Events:
      FirstSeen     LastSeen        Count   From                    SubObjectPath   Type            Reason                          Message
      ---------     --------        -----   ----                    -------------   --------        ------                          -------
      2m            2m              1       service-controller                      Normal          EnsuringLoadBalancer            Ensuring load balancer
      2m            2m              1       gce-cloudprovider                       Normal          LoadBalancerManualChange        Firewall change required by network admin: `gcloud compute firewall-rules create aa8a1dd628ddb11e78ce042010a80000 --network https://www.googleapis.com/compute/v1/projects/playground/global/networks/e2e-test-nicksardo --description "{\"kubernetes.io/service-name\":\"default/myechosvc1\", \"kubernetes.io/service-ip\":\"\"}" --allow tcp:9000 --source-ranges 0.0.0.0/0 --target-tags e2e-test-nicksardo-minion --project playground`
      2m            2m              1       gce-cloudprovider                       Normal          LoadBalancerManualChange        Firewall change required by network admin: `gcloud compute firewall-rules create k8s-1aee5045e658d174-node-hc --network https://www.googleapis.com/compute/v1/projects/playground/global/networks/e2e-test-nicksardo --description "" --allow tcp:10256 --source-ranges 130.211.0.0/22,35.191.0.0/16,209.85.152.0/22,209.85.204.0/22 --target-tags e2e-test-nicksardo-minion --project playground`
      1m            1m              1       service-controller                      Normal          EnsuredLoadBalancer             Ensured load balancer
    ```
    1732a8b9
Name
Last commit
Last update
..
e2e Loading commit data...
e2e_federation Loading commit data...
e2e_node Loading commit data...
fixtures Loading commit data...
images Loading commit data...
integration Loading commit data...
kubemark Loading commit data...
list Loading commit data...
soak Loading commit data...
utils Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...
test_owners.csv Loading commit data...
test_owners.json Loading commit data...