2.0-rc2

24 views
Skip to first unread message

Castex, Antoine

unread,
Apr 25, 2018, 7:27:22 AM4/25/18
to Forseti Security Beta Testers
Hello team

I have successfully installed the last release of rc2. It works good

But i want to connect to the cloud sql instance database from cloud shell, but i don't have the root password, what is the password ?

antoine_castex@gbl-imt-ve-dfcasbigquery-test:~$ gcloud sql connect forseti-server-4540 --user=root
Whitelisting your IP for incoming connection for 5 minutes...done.
Connecting to database with SQL user [root].Enter password:
ERROR 1045 (28000): Access denied for user 'root'@'35.195.132.248' (using password: NO)
I have follow your documentation 


$ cloudshell> git clone --single-branch -b 2.0-rc2 https://github.com/GoogleCloudPlatform/forseti-security.git


4. Install Forseti Security. This installs a server and a client VM instance.


$ cloudshell> cd forseti-security
$ cloudshell> python setup/installer.py




Cordialement / Best Regards

jeshie_dribbble_cloud.gif

CASTEX Antoine

Cloud Developer

Technology & Operations - Digital Factory

Group Information Systems & Technology (IS&T)

VEOLIA 30 rue Madeleine Vionnet / 93300 Aubervilliers / France

Bureau : 0 - Ouest - 137F

Direct: +33 1 85 57 70 91

Mobile: +33 6 10 93 63 49

www.veolia.com


  https://www.facebook.com/pages/Veolia/106821786149402 https://www.linkedin.com/company/veolia-environnement https://twitter.com/veolia



--------------------------------------------------------------------------------------------
This e-mail transmission (message and any attached files) may contain information that is proprietary, privileged and/or confidential to Veolia Environnement and/or its affiliates and is intended exclusively for the person(s) to whom it is addressed. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies of this e-mail, including all attachments. Unless expressly authorized, any use, disclosure, publication, retransmission or dissemination of this e-mail and/or of its attachments is strictly prohibited. 

Ce message electronique et ses fichiers attaches sont strictement confidentiels et peuvent contenir des elements dont Veolia Environnement et/ou l'une de ses entites affiliees sont proprietaires. Ils sont donc destines a l'usage de leurs seuls destinataires. Si vous avez recu ce message par erreur, merci de le retourner a son emetteur et de le detruire ainsi que toutes les pieces attachees. L'utilisation, la divulgation, la publication, la distribution, ou la reproduction non expressement autorisees de ce message et de ses pieces attachees sont interdites.
--------------------------------------------------------------------------------------------

Marten van Wezel

unread,
Apr 25, 2018, 7:31:13 AM4/25/18
to Antoine Castex, beta-t...@forsetisecurity.org
Hi Antoine,

Try: (example)
./cloud_sql_proxy -instances=forseti2-somenumber:zone:forseti-server-<number>=tcp:3306 &mysql -u root --host 127.0.0.1

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.
To view this discussion on the web visit https://groups.google.com/a/forsetisecurity.org/d/msgid/beta-testers/CAKAsqRG7-qO61k-7A%2B1etoQ2WyEJWpCHcG7fTS1sMvN7r5LP3w%40mail.gmail.com.

Castex, Antoine

unread,
Apr 25, 2018, 7:40:16 AM4/25/18
to Marten van Wezel, Forseti Security Beta Testers
Marten thanks but cloud sql proxy is not installed on my cloudshell, if i can find a way to not use i would love to  lol





Cordialement / Best Regards

jeshie_dribbble_cloud.gif

CASTEX Antoine

Cloud Developer

Technology & Operations - Digital Factory

Group Information Systems & Technology (IS&T)

VEOLIA 30 rue Madeleine Vionnet / 93300 Aubervilliers / France

Bureau : 0 - Ouest - 137F

Direct: +33 1 85 57 70 91

Mobile: +33 6 10 93 63 49

www.veolia.com


  https://www.facebook.com/pages/Veolia/106821786149402 https://www.linkedin.com/company/veolia-environnement https://twitter.com/veolia


On Wed, Apr 25, 2018 at 1:31 PM, Marten van Wezel <mart...@google.com> wrote:
Hi Antoine,

Try: (example)
./cloud_sql_proxy -instances=forseti2-somenumber:zone:forseti-server-<number>=tcp:3306 &mysql -u root --host 127.0.0.1

To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers+unsubscribe@forsetisecurity.org.
To post to this group, send email to beta-testers@forsetisecurity.org.

Castex, Antoine

unread,
Apr 25, 2018, 7:50:57 AM4/25/18
to Marten van Wezel, Forseti Security Beta Testers
I have installed cloud sql proxy on my shell

put my instance name but there is nothing append






Cordialement / Best Regards

jeshie_dribbble_cloud.gif

CASTEX Antoine

Cloud Developer

Technology & Operations - Digital Factory

Group Information Systems & Technology (IS&T)

VEOLIA 30 rue Madeleine Vionnet / 93300 Aubervilliers / France

Bureau : 0 - Ouest - 137F

Direct: +33 1 85 57 70 91

Mobile: +33 6 10 93 63 49

www.veolia.com


  https://www.facebook.com/pages/Veolia/106821786149402 https://www.linkedin.com/company/veolia-environnement https://twitter.com/veolia


On Wed, Apr 25, 2018 at 1:31 PM, Marten van Wezel <mart...@google.com> wrote:
Hi Antoine,

Try: (example)
./cloud_sql_proxy -instances=forseti2-somenumber:zone:forseti-server-<number>=tcp:3306 &mysql -u root --host 127.0.0.1

To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers+unsubscribe@forsetisecurity.org.
To post to this group, send email to beta-testers@forsetisecurity.org.

Marten van Wezel

unread,
Apr 25, 2018, 8:16:34 AM4/25/18
to Antoine Castex, beta-t...@forsetisecurity.org
Hi Antoine,

You missed the & at the end of the first command - you need to make the cloudsqlproxy process go into the background!

-M


On Wed, 25 Apr 2018 at 12:50, 'Castex, Antoine' via Forseti Security Beta Testers <beta-t...@forsetisecurity.org> wrote:
I have installed cloud sql proxy on my shell

put my instance name but there is nothing append






Cordialement / Best Regards

jeshie_dribbble_cloud.gif

CASTEX Antoine

Cloud Developer

Technology & Operations - Digital Factory

Group Information Systems & Technology (IS&T)

VEOLIA 30 rue Madeleine Vionnet / 93300 Aubervilliers / France

Bureau : 0 - Ouest - 137F

Direct: +33 1 85 57 70 91

Mobile: +33 6 10 93 63 49

www.veolia.com


  https://www.facebook.com/pages/Veolia/106821786149402 https://www.linkedin.com/company/veolia-environnement https://twitter.com/veolia


On Wed, Apr 25, 2018 at 1:31 PM, Marten van Wezel <mart...@google.com> wrote:
Hi Antoine,

Try: (example)
./cloud_sql_proxy -instances=forseti2-somenumber:zone:forseti-server-<number>=tcp:3306 &mysql -u root --host 127.0.0.1

To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.


--------------------------------------------------------------------------------------------
This e-mail transmission (message and any attached files) may contain information that is proprietary, privileged and/or confidential to Veolia Environnement and/or its affiliates and is intended exclusively for the person(s) to whom it is addressed. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies of this e-mail, including all attachments. Unless expressly authorized, any use, disclosure, publication, retransmission or dissemination of this e-mail and/or of its attachments is strictly prohibited. 

Ce message electronique et ses fichiers attaches sont strictement confidentiels et peuvent contenir des elements dont Veolia Environnement et/ou l'une de ses entites affiliees sont proprietaires. Ils sont donc destines a l'usage de leurs seuls destinataires. Si vous avez recu ce message par erreur, merci de le retourner a son emetteur et de le detruire ainsi que toutes les pieces attachees. L'utilisation, la divulgation, la publication, la distribution, ou la reproduction non expressement autorisees de ce message et de ses pieces attachees sont interdites.
--------------------------------------------------------------------------------------------

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.
To view this discussion on the web visit https://groups.google.com/a/forsetisecurity.org/d/msgid/beta-testers/CAKAsqRHFR5s9o17pgm978fMRkTGkuumtxzyV-w%3DfT-hZdnoKSQ%40mail.gmail.com.

Castex, Antoine

unread,
Apr 25, 2018, 8:46:32 AM4/25/18
to Marten van Wezel, Forseti Security Beta Testers
I have this

antoine_castex@gbl-imt-ve-dfcasbigquery-test:~$ ./cloud_sql_proxy -instances=gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540=tcp:3306 & mysql -u root --host 127.0.0.1
[1] 932
ERROR 2003 (HY000): Can't connect to MySQL server on '127.0.0.1' (111 "Connection refused")
antoine_castex@gbl-imt-ve-dfcasbigquery-test:~$ 2018/04/25 14:42:01 Listening on 127.0.0.1:3306 for gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540
2018/04/25 14:42:01 Ready for new connections




Cordialement / Best Regards

jeshie_dribbble_cloud.gif

CASTEX Antoine

Cloud Developer

Technology & Operations - Digital Factory

Group Information Systems & Technology (IS&T)

VEOLIA 30 rue Madeleine Vionnet / 93300 Aubervilliers / France

Bureau : 0 - Ouest - 137F

Direct: +33 1 85 57 70 91

Mobile: +33 6 10 93 63 49

www.veolia.com


  https://www.facebook.com/pages/Veolia/106821786149402 https://www.linkedin.com/company/veolia-environnement https://twitter.com/veolia


On Wed, Apr 25, 2018 at 2:16 PM, 'Marten van Wezel' via Forseti Security Beta Testers <beta-t...@forsetisecurity.org> wrote:
Hi Antoine,

You missed the & at the end of the first command - you need to make the cloudsqlproxy process go into the background!

-M


On Wed, 25 Apr 2018 at 12:50, 'Castex, Antoine' via Forseti Security Beta Testers <beta-testers@forsetisecurity.org> wrote:
I have installed cloud sql proxy on my shell

put my instance name but there is nothing append






Cordialement / Best Regards

jeshie_dribbble_cloud.gif

CASTEX Antoine

Cloud Developer

Technology & Operations - Digital Factory

Group Information Systems & Technology (IS&T)

VEOLIA 30 rue Madeleine Vionnet / 93300 Aubervilliers / France

Bureau : 0 - Ouest - 137F

Direct: +33 1 85 57 70 91

Mobile: +33 6 10 93 63 49

www.veolia.com


  https://www.facebook.com/pages/Veolia/106821786149402 https://www.linkedin.com/company/veolia-environnement https://twitter.com/veolia


On Wed, Apr 25, 2018 at 1:31 PM, Marten van Wezel <mart...@google.com> wrote:
Hi Antoine,

Try: (example)
./cloud_sql_proxy -instances=forseti2-somenumber:zone:forseti-server-<number>=tcp:3306 &mysql -u root --host 127.0.0.1

To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers+unsubscribe@forsetisecurity.org.
To post to this group, send email to beta-testers@forsetisecurity.org.


--------------------------------------------------------------------------------------------
This e-mail transmission (message and any attached files) may contain information that is proprietary, privileged and/or confidential to Veolia Environnement and/or its affiliates and is intended exclusively for the person(s) to whom it is addressed. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies of this e-mail, including all attachments. Unless expressly authorized, any use, disclosure, publication, retransmission or dissemination of this e-mail and/or of its attachments is strictly prohibited. 

Ce message electronique et ses fichiers attaches sont strictement confidentiels et peuvent contenir des elements dont Veolia Environnement et/ou l'une de ses entites affiliees sont proprietaires. Ils sont donc destines a l'usage de leurs seuls destinataires. Si vous avez recu ce message par erreur, merci de le retourner a son emetteur et de le detruire ainsi que toutes les pieces attachees. L'utilisation, la divulgation, la publication, la distribution, ou la reproduction non expressement autorisees de ce message et de ses pieces attachees sont interdites.
--------------------------------------------------------------------------------------------

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers+unsubscribe@forsetisecurity.org.
To post to this group, send email to beta-testers@forsetisecurity.org.

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers+unsubscribe@forsetisecurity.org.
To post to this group, send email to beta-testers@forsetisecurity.org.
To view this discussion on the web visit https://groups.google.com/a/forsetisecurity.org/d/msgid/beta-testers/CADwtzO8uNY8uvGhg5bsu%2BfAEQrd5JvCeuKJ6sUq%2BXWN%3D3iymqQ%40mail.gmail.com.

Muharem Hrnjadovic

unread,
Apr 25, 2018, 8:50:49 AM4/25/18
to Antoine Castex, Marten van Wezel, beta-t...@forsetisecurity.org
Do you need to supply a '-credential_file' to the proxy? In my setup I have a service account that is authorized to access the Cloud Sql instance and the proxy needs to connect assuming that service account identity.

To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.


--------------------------------------------------------------------------------------------
This e-mail transmission (message and any attached files) may contain information that is proprietary, privileged and/or confidential to Veolia Environnement and/or its affiliates and is intended exclusively for the person(s) to whom it is addressed. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies of this e-mail, including all attachments. Unless expressly authorized, any use, disclosure, publication, retransmission or dissemination of this e-mail and/or of its attachments is strictly prohibited. 

Ce message electronique et ses fichiers attaches sont strictement confidentiels et peuvent contenir des elements dont Veolia Environnement et/ou l'une de ses entites affiliees sont proprietaires. Ils sont donc destines a l'usage de leurs seuls destinataires. Si vous avez recu ce message par erreur, merci de le retourner a son emetteur et de le detruire ainsi que toutes les pieces attachees. L'utilisation, la divulgation, la publication, la distribution, ou la reproduction non expressement autorisees de ce message et de ses pieces attachees sont interdites.
--------------------------------------------------------------------------------------------

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.


--------------------------------------------------------------------------------------------
This e-mail transmission (message and any attached files) may contain information that is proprietary, privileged and/or confidential to Veolia Environnement and/or its affiliates and is intended exclusively for the person(s) to whom it is addressed. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies of this e-mail, including all attachments. Unless expressly authorized, any use, disclosure, publication, retransmission or dissemination of this e-mail and/or of its attachments is strictly prohibited. 

Ce message electronique et ses fichiers attaches sont strictement confidentiels et peuvent contenir des elements dont Veolia Environnement et/ou l'une de ses entites affiliees sont proprietaires. Ils sont donc destines a l'usage de leurs seuls destinataires. Si vous avez recu ce message par erreur, merci de le retourner a son emetteur et de le detruire ainsi que toutes les pieces attachees. L'utilisation, la divulgation, la publication, la distribution, ou la reproduction non expressement autorisees de ce message et de ses pieces attachees sont interdites.
--------------------------------------------------------------------------------------------

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.
To view this discussion on the web visit https://groups.google.com/a/forsetisecurity.org/d/msgid/beta-testers/CAKAsqRHD93vm3tn%2BTZB9evKuuP4BT%2B%3Dpz8Ay39-3932mvYf_Sg%40mail.gmail.com.


--
Best regards!


Muharem Hrnjadovic | Strategic Cloud Engineer | alt...@google.com | +41 78 830-7092

Castex, Antoine

unread,
Apr 25, 2018, 9:10:50 AM4/25/18
to Muharem Hrnjadovic, Marten van Wezel, Forseti Security Beta Testers
I have created a service account with cloud sql client role in IAM 

antoine_castex@gbl-imt-ve-dfcasbigquery-test:~$ ./cloud_sql_proxy -instances=gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540=tcp:3306 -credential_file=/home/antoine_castex/cloudsql_forseti.json & mysql -u root --host 127.0.0.1
[2] 1001
2018/04/25 15:09:47 New connection for "gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540"
2018/04/25 15:09:47 Throttling refreshCfg(gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540): it was only called 22.250586976s ago
2018/04/25 15:09:47 couldn't connect to "gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540": googleapi: Error 401: Invalid Credentials, authError
ERROR 2013 (HY000): Lost connection to MySQL server at 'reading initial communication packet', system error: 0 "Internal error/check (Not system error)"
antoine_castex@gbl-imt-ve-dfcasbigquery-test:~$ 2018/04/25 15:09:47 using credential file for authentication; email=cloudsqlpr...@gbl-imt-ve-dfcasbigquery-test.iam.gserviceaccount.com
2018/04/25 15:09:47 listen tcp 127.0.0.1:3306: bind: address already in use

👿



Cordialement / Best Regards

jeshie_dribbble_cloud.gif

CASTEX Antoine

Cloud Developer

Technology & Operations - Digital Factory

Group Information Systems & Technology (IS&T)

VEOLIA 30 rue Madeleine Vionnet / 93300 Aubervilliers / France

Bureau : 0 - Ouest - 137F

Direct: +33 1 85 57 70 91

Mobile: +33 6 10 93 63 49

www.veolia.com


  https://www.facebook.com/pages/Veolia/106821786149402 https://www.linkedin.com/company/veolia-environnement https://twitter.com/veolia


On Wed, Apr 25, 2018 at 2:50 PM, Muharem Hrnjadovic <alt...@google.com> wrote:
Do you need to supply a '-credential_file' to the proxy? In my setup I have a service account that is authorized to access the Cloud Sql instance and the proxy needs to connect assuming that service account identity.

To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers+unsubscribe@forsetisecurity.org.
To post to this group, send email to beta-testers@forsetisecurity.org.


--------------------------------------------------------------------------------------------
This e-mail transmission (message and any attached files) may contain information that is proprietary, privileged and/or confidential to Veolia Environnement and/or its affiliates and is intended exclusively for the person(s) to whom it is addressed. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies of this e-mail, including all attachments. Unless expressly authorized, any use, disclosure, publication, retransmission or dissemination of this e-mail and/or of its attachments is strictly prohibited. 

Ce message electronique et ses fichiers attaches sont strictement confidentiels et peuvent contenir des elements dont Veolia Environnement et/ou l'une de ses entites affiliees sont proprietaires. Ils sont donc destines a l'usage de leurs seuls destinataires. Si vous avez recu ce message par erreur, merci de le retourner a son emetteur et de le detruire ainsi que toutes les pieces attachees. L'utilisation, la divulgation, la publication, la distribution, ou la reproduction non expressement autorisees de ce message et de ses pieces attachees sont interdites.
--------------------------------------------------------------------------------------------

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers+unsubscribe@forsetisecurity.org.
To post to this group, send email to beta-testers@forsetisecurity.org.

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers+unsubscribe@forsetisecurity.org.
To post to this group, send email to beta-testers@forsetisecurity.org.


--------------------------------------------------------------------------------------------
This e-mail transmission (message and any attached files) may contain information that is proprietary, privileged and/or confidential to Veolia Environnement and/or its affiliates and is intended exclusively for the person(s) to whom it is addressed. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies of this e-mail, including all attachments. Unless expressly authorized, any use, disclosure, publication, retransmission or dissemination of this e-mail and/or of its attachments is strictly prohibited. 

Ce message electronique et ses fichiers attaches sont strictement confidentiels et peuvent contenir des elements dont Veolia Environnement et/ou l'une de ses entites affiliees sont proprietaires. Ils sont donc destines a l'usage de leurs seuls destinataires. Si vous avez recu ce message par erreur, merci de le retourner a son emetteur et de le detruire ainsi que toutes les pieces attachees. L'utilisation, la divulgation, la publication, la distribution, ou la reproduction non expressement autorisees de ce message et de ses pieces attachees sont interdites.
--------------------------------------------------------------------------------------------

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers+unsubscribe@forsetisecurity.org.
To post to this group, send email to beta-testers@forsetisecurity.org.


--
Best regards!


Muharem Hrnjadovic | Strategic Cloud Engineer | alt...@google.com | +41 78 830-7092

Castex, Antoine

unread,
Apr 25, 2018, 9:58:17 AM4/25/18
to Muharem Hrnjadovic, Marten van Wezel, Forseti Security Beta Testers
My test was too fast after creation of service account

it works good now !

thank for help  Marten + Muharem + Joe !

Best team !



Cordialement / Best Regards

jeshie_dribbble_cloud.gif

CASTEX Antoine

Cloud Developer

Technology & Operations - Digital Factory

Group Information Systems & Technology (IS&T)

VEOLIA 30 rue Madeleine Vionnet / 93300 Aubervilliers / France

Bureau : 0 - Ouest - 137F

Direct: +33 1 85 57 70 91

Mobile: +33 6 10 93 63 49

www.veolia.com


  https://www.facebook.com/pages/Veolia/106821786149402 https://www.linkedin.com/company/veolia-environnement https://twitter.com/veolia


On Wed, Apr 25, 2018 at 3:10 PM, Castex, Antoine <antoine...@veolia.com> wrote:
I have created a service account with cloud sql client role in IAM 

antoine_castex@gbl-imt-ve-dfcasbigquery-test:~$ ./cloud_sql_proxy -instances=gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540=tcp:3306 -credential_file=/home/antoine_castex/cloudsql_forseti.json & mysql -u root --host 127.0.0.1
[2] 1001
2018/04/25 15:09:47 New connection for "gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540"
2018/04/25 15:09:47 Throttling refreshCfg(gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540): it was only called 22.250586976s ago
2018/04/25 15:09:47 couldn't connect to "gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-
server-4540": googleapi: Error 401: Invalid Credentials, authError
ERROR 2013 (HY000): Lost connection to MySQL server at 'reading initial communication packet', system error: 0 "Internal error/check (Not system error)"
antoine_castex@gbl-imt-ve-dfcasbigquery-test:~$ 2018/04/25 15:09:47 using credential file for authentication; email=cloudsqlproxy-forseti@gbl-imt-ve-dfcasbigquery-test.iam.gserviceaccount.com

👿

Marten van Wezel

unread,
Apr 25, 2018, 10:03:41 AM4/25/18
to Antoine Castex, Muharem Hrnjadovic, beta-t...@forsetisecurity.org
(note: I suspect you actually don't need the credential here.)

Would very much like to hear your report in a week or two on if RC2 is stable for you and providing you with what you need (other than the storage file we discussed elsewhere)

antoine_castex@gbl-imt-ve-dfcasbigquery-test:~$ ./cloud_sql_proxy -instances=gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540=tcp:3306 -credential_file=/home/antoine_castex/cloudsql_forseti.json & mysql -u root --host 127.0.0.1
[2] 1001
2018/04/25 15:09:47 New connection for "gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540"
2018/04/25 15:09:47 Throttling refreshCfg(gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540): it was only called 22.250586976s ago
2018/04/25 15:09:47 couldn't connect to "gbl-imt-ve-dfcasbigquery-test:us-central1:forseti-server-4540": googleapi: Error 401: Invalid Credentials, authError
ERROR 2013 (HY000): Lost connection to MySQL server at 'reading initial communication packet', system error: 0 "Internal error/check (Not system error)"
antoine_castex@gbl-imt-ve-dfcasbigquery-test:~$ 2018/04/25 15:09:47 using credential file for authentication; email=cloudsqlpr...@gbl-imt-ve-dfcasbigquery-test.iam.gserviceaccount.com
2018/04/25 15:09:47 listen tcp 127.0.0.1:3306: bind: address already in use

👿



Cordialement / Best Regards

jeshie_dribbble_cloud.gif

CASTEX Antoine

Cloud Developer

Technology & Operations - Digital Factory

Group Information Systems & Technology (IS&T)

VEOLIA 30 rue Madeleine Vionnet / 93300 Aubervilliers / France

Bureau : 0 - Ouest - 137F

Direct: +33 1 85 57 70 91

Mobile: +33 6 10 93 63 49

www.veolia.com


  https://www.facebook.com/pages/Veolia/106821786149402 https://www.linkedin.com/company/veolia-environnement https://twitter.com/veolia


On Wed, Apr 25, 2018 at 2:50 PM, Muharem Hrnjadovic <alt...@google.com> wrote:
Do you need to supply a '-credential_file' to the proxy? In my setup I have a service account that is authorized to access the Cloud Sql instance and the proxy needs to connect assuming that service account identity.

To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.


--------------------------------------------------------------------------------------------
This e-mail transmission (message and any attached files) may contain information that is proprietary, privileged and/or confidential to Veolia Environnement and/or its affiliates and is intended exclusively for the person(s) to whom it is addressed. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies of this e-mail, including all attachments. Unless expressly authorized, any use, disclosure, publication, retransmission or dissemination of this e-mail and/or of its attachments is strictly prohibited. 

Ce message electronique et ses fichiers attaches sont strictement confidentiels et peuvent contenir des elements dont Veolia Environnement et/ou l'une de ses entites affiliees sont proprietaires. Ils sont donc destines a l'usage de leurs seuls destinataires. Si vous avez recu ce message par erreur, merci de le retourner a son emetteur et de le detruire ainsi que toutes les pieces attachees. L'utilisation, la divulgation, la publication, la distribution, ou la reproduction non expressement autorisees de ce message et de ses pieces attachees sont interdites.
--------------------------------------------------------------------------------------------

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.


--------------------------------------------------------------------------------------------
This e-mail transmission (message and any attached files) may contain information that is proprietary, privileged and/or confidential to Veolia Environnement and/or its affiliates and is intended exclusively for the person(s) to whom it is addressed. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies of this e-mail, including all attachments. Unless expressly authorized, any use, disclosure, publication, retransmission or dissemination of this e-mail and/or of its attachments is strictly prohibited. 

Ce message electronique et ses fichiers attaches sont strictement confidentiels et peuvent contenir des elements dont Veolia Environnement et/ou l'une de ses entites affiliees sont proprietaires. Ils sont donc destines a l'usage de leurs seuls destinataires. Si vous avez recu ce message par erreur, merci de le retourner a son emetteur et de le detruire ainsi que toutes les pieces attachees. L'utilisation, la divulgation, la publication, la distribution, ou la reproduction non expressement autorisees de ce message et de ses pieces attachees sont interdites.
--------------------------------------------------------------------------------------------

--
You received this message because you are subscribed to the Google Groups "Forseti Security Beta Testers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to beta-testers...@forsetisecurity.org.
To post to this group, send email to beta-t...@forsetisecurity.org.


--
Best regards!


Muharem Hrnjadovic | Strategic Cloud Engineer | alt...@google.com | +41 78 830-7092
Reply all
Reply to author
Forward
0 new messages