删除默认服务帐户后，无法在Dataproc上创建群集 [英] Unable to create cluster on Dataproc after deleting default service account

问题描述

我错误地删除了我的项目的默认服务帐户 - {project_id} - [e-mail]
现在，无论何时我尝试在Data proc上创建群集我得到以下错误：

类型为'serviceAccount'的资源'{project_id}[e-mail]'找到。

有没有简单的方法可以解决这个问题 - 不会丢失项目的任何数据。为解释遇到此问题的任何其他人，此错误是由实际删除服务帐户而引起的，而不是简单地将其从项目编辑在 IAM和Admin 选项下;对于只从项目编辑器列表中删除帐户的任何人，只需使用普通的添加成员即可将其添加回来。

通常，服务帐户是在实时计算引擎API已启用，因此目前只需通过

这可能会导致问题，如果您已经有现有的计算引擎虚拟机正在运行，您依赖于您的生产能力，但是如果您删除了服务帐户，那么这些虚拟机可能有些破碎。

查找 Google Compute Engine API 然后点击禁用，并确保在确认提示中单击禁用按钮，而不是取消按钮。

重新启用计算引擎API时，您可能会遇到以下错误r：

 项目设置的更新失败，出现以下错误： - 后端配置错误：{compute_component FAILED_PRECONDITION：当前正在被停用，并且在激活发生之前必须完成停用。}; 
  

但是如果您等了几分钟再试一次，它应该可以工作（我等了大约3分钟后再次尝试，但所需的等待可能会有所不同）。同样，首先在重新启用Compute API并立即尝试创建新的Dataproc集群后，您可能会点击：

 失败加载网络
 
访问未配置。计算引擎API尚未用于项目< project-number>之前或它被禁用。访问https://console.developers.google.com/apis/api/compute_component/overview?project=<project-number>即可启用它。然后重试。如果您最近启用了此API，请等待几分钟，以便将操作传播到我们的系统并重试。 
  

但是，正如它提到的，再等几分钟就可以让设置传播，并且它应该再次正常加载。

一旦Compute Engine API重新启用后，Dataproc的 Create Cluster 页面可以在云端控制台上运行，还可以在 IAM和Admin 下再次验证默认计算服务帐户是否存在，并且它已被自动添加为项目编辑器。

I had mistakenly deleted a default "service account" for my project - {project_id}[e-mail] Now whenever I try to create a cluster on Data proc I get the following error:

The resource '{project_id}[e-mail]' of type 'serviceAccount' was not found.

Is there an easy way to resolve this issue - without losing any data for the project.

解决方案

To clarify to anyone else who encounters this issue, this error is caused by actually deleting the service account, and not simply from removing it from the list of "project editors" under the IAM and Admin options; to anyone who only removed the account from the project editor list, you can simply add it back using the normal "Add Member".

Generally the service account gets created at the time the Compute Engine API is enabled, so at the moment it works to fix this issue simply by disabling and then re-enabling the Compute Engine API through the API Manager.

This could cause problems if you already have existing Compute Engine VMs running which you depend on for your production capabilities, but if you deleted the service account, then those VMs are likely somewhat broken anyways.

Find Google Compute Engine API there and click on "disable", and make sure to click the Disable button on the confirmation prompt instead of the Cancel button.

When re-enabling the Compute Engine API, you may encounter the following error:

Update failed with following error(s) for project settings: -- Backend Provisioning Error: {compute_component FAILED_PRECONDITION: The service is currently being deactivated and deactivation must complete before activation can occur.};

but if you wait a couple minutes and try again, it should work (I waited about 3 minutes before trying again, but the required wait may vary). Likewise, at first after re-enabling the Compute API and immediately trying to create a new Dataproc cluster, you may hit:

Failed to load networks

Access Not Configured. Compute Engine API has not been used in project <project-number> before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/compute_component/overview?project=<project-number> then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.

But as it mentions, again waiting a couple minutes lets the settings propagate and it should load fine again.

Once the Compute Engine API is re-enabled sufficiently that Dataproc's Create Cluster page works on the cloud console, you can also verify again under IAM and Admin that the default compute service account exists again and that it has been auto-added as a Project editor as well.

这篇关于删除默认服务帐户后，无法在Dataproc上创建群集的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！