oci_core_virtual_network.CompleteVCN: Status: 404; Code: NotAuthorizedOrNotFound; about terraform-kubernetes-installer HOT 7 CLOSED

FYI, I was able to reproduce what you are seeing by removing my user from the group that granted me rights to manage resources in my target compartment:

terraform apply
...
terraform creating local resources such as certs, tokens, etc.
....
Error applying plan:

1 error(s) occurred:

* module.vcn.oci_core_virtual_network.CompleteVCN: 1 error(s) occurred:

* oci_core_virtual_network.CompleteVCN: Status: 404; Code: NotAuthorizedOrNotFound; OPC Request ID: /OMITTED
; Message: Authorization failed or requested resource not found.

So, in terms of the prerequisites that are not called out in this project, you'd need to:

1. Create a compartment e.g. kubernetes
2. Create a group e.g. kubernetes-installer
3. Create a Policy for the group e.g. Allow group kubernetes-installer to manage all-resources in compartment kubernetes
4. Create a user
5. Upload an API key for the user
6. Add User to the kubernetes-installer group

from terraform-kubernetes-installer.

Craig,

This is most likely not a defect these scripts or this project. It looks like to me like either a authentication or authorization error with Oracle Cloud Infrastructure (formally BMC / Bare Metal Cloud).

Double check that the user / tenancy / compartment OCIDs. Also check that the user has permission to create artifacts in the tenancy / compartment and that you've uploaded your PEM public key to the user in the Console and you are using the PEM private key for the private_key_path for the provider.

from terraform-kubernetes-installer.

from terraform-kubernetes-installer.

When you say that "apply created other resources", do you mean resources in BMC in your compartment?

The scripts create a number of Terraform resources like certs, tokens, etc. Though, as far as I am aware, the first actual OCI resource that gets created is the CompleteVCN, which is what is failing for you:

* module.vcn.oci_core_virtual_network.CompleteVCN: 1 error(s) occurred:

* oci_core_virtual_network.CompleteVCN: Status: 404; Code: NotAuthorizedOrNotFound; OPC Request ID: /OMITTED; Message: Authorization failed or requested resource not found.

As a debug step to take the scripts out of the equation, you could use the OCI console to see if the scripts created any network or compute resources in the expected compartment. If it did not, you could try manually crating a Virtual Cloud Network resource.

from terraform-kubernetes-installer.

Perfect, thanks for that! I will try it out shortly.

from terraform-kubernetes-installer.

At first, I found that I didn't have permissions to add a new policy for a new kubernetes compartment e.g.

However, I later discovered that the root compartment OCID is that same as the tenancy OCID so when I set them the same, the "terraform apply" worked.

from terraform-kubernetes-installer.

Glad to hear!

from terraform-kubernetes-installer.