Skip to content

Cluster created by GitLab missing OAuth scopes

We've created new kubernetes cluster in our Google Cloud using the GitLab UI (Gold Plan)

When deploying to the cluster, there is missing permissions and the pod is unable to pull the image from GCR (Which is on the same GC project - so should work without anything from my side)

I went to the google console and indeed - the cluster is missing those required scopes. The only workaround right now is to create a new nodepool and switch it with the current nodepool which is missing the scopes.

Screenshot_from_2019-09-20_10-43-47

Events:
  Type     Reason   Age                     From                                                        Message
  ----     ------   ----                    ----                                                        -------
  Warning  Failed   9m36s (x4616 over 17h)  kubelet, gke-infrastructure-new-default-pool-707840a8-sg14  Error: ImagePullBackOff
  Normal   Pulling  4m45s (x210 over 17h)   kubelet, gke-infrastructure-new-default-pool-707840a8-sg14  pulling image "eu.gcr.io/censored/censored:master.ccd373753d78e2f2f2a67672cbe5f832fc5ec970"