Can't enumerate GKE clusters

[towolf]

Suddenly in my team the GKE clusters in our Switch config stopped working.

	* store "gke.gke" returned an error during the search: failed to list GKE clusters for project with ID "xxx": googleapi: Error 403: Project lookup error: permission denied on resource 'projects/' (or it may not exist).
Details:
[
  {
    "@type": "type.googleapis.com/google.rpc.RequestInfo",
    "requestId": "0x1f7a50f3471b0e21"
  },
  {
    "@type": "type.googleapis.com/google.rpc.ErrorInfo",
    "domain": "container.googleapis.com",
    "reason": "IAM_PERMISSION_DENIED"
  }
]
, forbidden
 
Error: abort

Not sure what request it's using, but gcloud projects list still works.

[towolf]

Config:

kubeconfigStores:
  - kind: gke
    id: gke
    config:
      authentication:
        gcpAccount: xxx@yyy.zz
        authenticationType: gcloud
    cache:
      kind: filesystem
      config:
        path: ~/.kube/switch-cache

[towolf]

I don't really know what I'm doing, but this seems to work:

$ git diff pkg/store/kubeconfig_store_gke.go
diff --git pkg/store/kubeconfig_store_gke.go pkg/store/kubeconfig_store_gke.go
index 33b93c6f..c322457a 100644
--- pkg/store/kubeconfig_store_gke.go
+++ pkg/store/kubeconfig_store_gke.go
@@ -182,7 +182,7 @@ func (s *GKEStore) StartSearch(channel chan storetypes.SearchResult) {
        }
 
        for projectName, projectId := range s.ProjectNameToID {
-               resp, err := s.GkeClient.Projects.Zones.Clusters.List(projectId, "-").Context(ctx).Do()
+               resp, err := s.GkeClient.Projects.Locations.Clusters.List(fmt.Sprintf("projects/%s/locations/-", projectId)).Context(ctx).Do()
                if err != nil {
                        channel <- storetypes.SearchResult{
                                Error: fmt.Errorf("failed to list GKE clusters for project with ID %q: %w", projectId, err),

[BadLiveware]

Experiencing the same things, and using the locations does seem to work.

Cant see that the projects.zones.cluster.list is deprecated https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters/list but https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters/locations is marked deprecated in favor of the projects.locations variant

[towolf]

@BadLiveware, thanks for confirming. Maybe you know this?

Why are we using the Go package google.golang.org/api/container/v1 and not cloud.google.com/go/container/apiv1?

Where would I find a changelog for these Go packages?

[towolf]

Ah, on this page it seems to indicate the deprecated status for the parameters:
https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters/list

So the "parent field" is the string we assembled, which contains the projectId.

[BadLiveware]

@BadLiveware, thanks for confirming. Maybe you know this?

Why are we using the Go package google.golang.org/api/container/v1 and not cloud.google.com/go/container/apiv1?

Where would I find a changelog for these Go packages?

I only really touch Go when I have to so I dont know :)

Ah, on this page it seems to indicate the deprecated status for the parameters: cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.zones.clusters/list

So the "parent field" is the string we assembled, which contains the projectId.

Yeah, that does seem right

---

Either way, Im running on the build in my PR for now until its merged or otherwise fixed

[towolf]

Either way, Im running on the build in my PR for now until its merged or otherwise fixed

Same 😆

Just hope this project continues to be maintained, because we find it useful.