Hi, So I've been trying to get gce to work, but no luck - it used to work, something changed, and now it isn't - not sure what happened, but I tried to setup everything from scratch again ...
On GCE, I've created a service account, when creating the account, I ticked the box to allow domain-wide delegation (DwD), the p12 got downloaded automatically and the pem extracted with the command from the ansible site (https://docs.ansible.com/ansible/guide_gce.html#credentials) and stored as ansible.pem, I then clicked on "View client ID", edited the name (ansible) and saved it. I've attached some screenshots that should help (I hope) ... https://console.developers.google.com/apis/credentials?project=projectname <https://lh3.googleusercontent.com/-N1XQgAEgtEI/VpEt2cE5AsI/AAAAAAAAFk4/-NJDzr1EmSY/s1600/oauth2clientids.png> <https://lh3.googleusercontent.com/-pz3l-MR84II/VpEt6YDeIkI/AAAAAAAAFlA/D_gKcfebC5Y/s1600/serviceaccounts.png> Service account details / list : <https://lh3.googleusercontent.com/-zEB2BcizsUc/VpEuDOyTzPI/AAAAAAAAFlI/cBGSfKcvIsQ/s1600/serviceaccountsdetail.png> View client detail : <https://lh3.googleusercontent.com/-XO0P411aA-Q/VpEuLctkSmI/AAAAAAAAFlQ/NYdhUM59KX4/s1600/serviceaccountsdetail-ansible-viewclientid.png> The secrets.py has the following : GCE_PARAMS = ('ansible@********.iam.gserviceaccount.com', '/full/path/to/ansible.pem') GCE_KEYWORD_PARAMS = {'project': '********'} The gce.ini has the following : [gce] libcloud_secrets = /full/path/to/secrets.py But now I get this output : Please Go to the following URL and sign in: > > https://accounts.google.com/o/oauth2/auth?scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcompute+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fdevstorage.full_control+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fndev.clouddns.readwrite&state=Libcloud+Request&redirect_uri=urn%3Aietf%3Awg%3Aoauth%3A2.0%3Aoob&response_type=code&client_id=ansible%40********.iam.gserviceaccount.com > Enter Code: Anyone got any ideas ? Any way to debug this ? Thanks! Alex -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/7b8f9312-8dd4-46d5-827d-3c1a986a7af6%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
