The fence-agent `fence_gce` and resource-agents `gcp-vpc-move-route` and `gcp-vpc-move-vip` can fail with if token file is not found

Solution In Progress - Updated -

Issue

  • The fence-agent fence_gce and resource-agents gcp-vpc-move-route and gcp-vpc-move-vip can fail with if token file is not found
  • The fence-agent fence_gce fails with the following error when attempting to fence a cluster node:
# fence_gce --action=reboot --zone=us-west1-c --project=sap-wizard -n node43 -v
2019-02-27 14:09:51,013 WARNING: file_cache is unavailable when using oauth2client >= 4.0.0
Traceback (most recent call last):
  File "/usr/lib/fence-agents/bundled/gce/googleapiclient/discovery_cache/__init__.py", line 41, in autodetect
    from . import file_cache
  File "/usr/lib/fence-agents/bundled/gce/googleapiclient/discovery_cache/file_cache.py", line 41, in <module>
    'file_cache is unavailable when using oauth2client >= 4.0.0')
ImportError: file_cache is unavailable when using oauth2client >= 4.0.0
2019-02-27 14:09:51,014 INFO: URL being requested: GET https://www.googleapis.com/discovery/v1/apis/compute/v1/rest
2019-02-27 14:09:51,149 INFO: URL being requested: GET https://www.googleapis.com/compute/v1/projects/sap-wizard /zones/us-west1-c/instances/node43?alt=json
2019-02-27 14:09:51,150 INFO: Attempting refresh to obtain initial access_token
2019-02-27 14:09:51,198 WARNING: Encountered 403 Forbidden with reason "insufficientPermissions"
2019-02-27 14:09:51,198 ERROR: Failed: get_power_status: <HttpError 403 when requesting https://www.googleapis.com/compute/v1/projects/sap-wizard/zones/us-west1-c/instances/node43?alt=json returned "Insufficient Permission: Request had insufficient authentication scopes.">

In the logs the following message is logged when using fence_gce.

Feb 28 11:59:40 node42 fence_gce: Failed: Create GCE compute v1 connection: load_pem_private_key() takes exactly 3 arguments (2 given)

Environment

  • Red Hat Enterprise Linux Server 8 (with the High Availability Add On)
  • pacemaker

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content