数据流服务帐户无法访问网络默认设置 [英] Network default is not accessible to Dataflow Service account

问题描述

在出现此错误时，在没有本地VPC网络的项目中启动数据流作业(2018-07-16_04_25_02-6605099454046602382)时出现问题

Having issues starting a Dataflow job(2018-07-16_04_25_02-6605099454046602382) in a project without a local VPC Network when I get this error

Workflow failed. Causes: Network default is not accessible to Dataflow
Service account

有一个共享的VPC，它通过名为default的网络连接到项目，该网络具有us-central1中的子网default –但是，用于运行数据流作业的服务帐户无法通过缝隙来访问它.我给了dataflow-service-producer服务帐户Compute Network User，但没有任何明显的效果.关于如何处理的任何想法吗?

There is a shared VPC connected to the project with a networked called default with a subnet default in us-central1 – however the service account used to run dataflow job don't seam to have access to it. I have given the dataflow-service-producer service account Compute Network User, without any noticeable effect. Any ideas on how I can processed?

推荐答案

在Cloud Dataflow中使用子网时，需要在运行管道时指定子网参数.但是，对于位于共享VPC网络中的子网，您需要根据以下格式使用完整URL .

The usage of subnetworks in Cloud Dataflow requires to specify the subnetwork parameter when running the pipeline; However, in the case of subnetwork that are located in a Shared VPC network, it is required to use the complete URL based on the following format, as you well mentioned.

https://www.googleapis.com/compute/v1/projects/<HOST_PROJECT>/regions/<REGION>/subnetworks/<SUBNETWORK>

此外，在这种情况下，建议验证您是否将项目的Dataflow服务帐户添加到Shared VPC的项目IAM表中，并授予其计算网络用户" 角色权限，以确保该服务具有所需的访问范围.

Additionally, in this cases is recommended to verify that you are adding the project's Dataflow service account into the Shared VPC's project IAM table and give it the "Compute Network User" role permission in order to ensure that the service has the required access scope.

最后，看来子网参数谷歌官方文档非常有用，并提供了有关此问题的详细信息.

Finally, it is seems that the Subnetwork parameter official Google's documentation is alraedy available with detailed information about this matter.

这篇关于数据流服务帐户无法访问网络默认设置的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！