gce_workload_cert_refresh timer spams logs with error message

Bug #2043788 reported by Andrew Grigorev
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
google-guest-agent (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Currently available google-guest-agent version 20230426.00-0ubuntu2~22.04.0 contains a 10-minute systemd timer, which runs `gce_workload_cert_refresh` binary, which produce following error message on all (non-GKE?) Google Compute VMs:

> Error getting config status, workload certificates may not be configured: HTTP 404

Looks like this behavior is fixed in recent versions of google-guest-agent, like 1:20231115.00-g1 available for debian.

See github issue: https://github.com/GoogleCloudPlatform/guest-agent/issues/200

Revision history for this message
John Patton (johnhpatton) wrote :

I'm also getting this

System:
> # uname -a
> Linux google-compute-host-60d3 6.2.0-1019-gcp #21~22.04.1-Ubuntu SMP Thu Nov 16 18:18:34 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

Log:
> Jan 21 15:20:18 ecomm-webtier-nonprod-61m0 gce_workload_cert_refresh[2292]: 2024/01/21 15:20:18: Error getting config status, workload certificates may not be configured: failed to GET "instance/gce-workload-certificates/config-status" from MDS with error: error connecting to metadata server, status code: 404
> Jan 21 15:20:18 ecomm-webtier-nonprod-61m0 gce_workload_cert_refresh[2292]: 2024/01/21 15:20:18: Done

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in google-guest-agent (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.