forseti-security/terraform-google-forseti

Forseti is not installed on VMs after quick installation (i.e using the Forseti module)

Closed this issue · 2 comments

I'm experiencing the same issue where Forseti is not installed on VMs after using the quick installation (i.e using the Forseti module). I understand you can manually install the google-cloud-sdk package after deploying the Forseti Compute Instance, which I have done to get around this issues, but this is something that has to be done each time the server is destroyed and a new one is spun up. Ideally I want this step automated like it's meant to be.

For context, I'm using the Google Cloud Healthcare Data Protection Suite and the Forseti module (v.5.2.1) is used. I've upgraded to v.5.2.2 as well, but I'm getting the same error.

I've forked the repo here to get around the issue, for now.

Below is part of the Serial port 1 (console) log where startup script that fails.

Jun 8 18:27:06 forseti-server-vm-fa2c5f6c systemd[1]: Started Wait until snapd is fully seeded. Jun 8 18:27:06 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:06 GCEMetadataScripts: startup-script: Processing triggers for dbus (1.12.2-1ubuntu1.2) ... Jun 8 18:27:06 forseti-server-vm-fa2c5f6c dbus-daemon[999]: [system] Reloaded configuration Jun 8 18:27:06 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:06 GCEMetadataScripts: startup-script: Processing triggers for mime-support (3.60ubuntu1) ... Jun 8 18:27:06 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:06 GCEMetadataScripts: startup-script: Processing triggers for man-db (2.8.3-2ubuntu0.1) ... Jun 8 18:27:07 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:07 GCEMetadataScripts: startup-script: Hit:1 http://us-central1.gce.archive.ubuntu.com/ubuntu bionic InRelease Jun 8 18:27:07 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:07 GCEMetadataScripts: startup-script: Hit:2 http://us-central1.gce.archive.ubuntu.com/ubuntu bionic-updates InRelease Jun 8 18:27:07 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:07 GCEMetadataScripts: startup-script: Hit:3 http://us-central1.gce.archive.ubuntu.com/ubuntu bionic-backports InRelease Jun 8 18:27:07 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:07 GCEMetadataScripts: startup-script: Hit:4 http://security.ubuntu.com/ubuntu bionic-security InRelease Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: startup-script: Reading package lists... Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: startup-script: Reading package lists... Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: startup-script: Building dependency tree... Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: startup-script: Reading state information... Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: startup-script: Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: startup-script: No apt package "google-cloud-sdk", but there is a snap with that name. Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: startup-script: Try "snap install google-cloud-sdk" Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: startup-script: Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: startup-script: E: Unable to locate package google-cloud-sdk Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: startup-script exit status 100 Jun 8 18:27:09 forseti-server-vm-fa2c5f6c GCEMetadataScripts[2784]: 2021/06/08 18:27:09 GCEMetadataScripts: Finished running startup scripts.

Originally posted by @onixalan in forseti-security/forseti-security#3863 (comment)

stale commented

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 15 days if no further activity occurs. Thank you for your contributions.

Issue still exists. Fix works but should be included in the main module.