Console doesn't show Resource manager tags added to certain resources. [294285160]

WAI

Bug

Status Update

No update yet.

Description

bh...@redhat.com

created issue #1

Aug 3, 2023 05:48AM

This will create a public issue which anybody can view and comment on.

Please provide as much information as possible. At least, this should include a description of your issue and steps to reproduce the problem. If possible please provide a summary of what steps or workarounds you have already tried, and any docs or articles you found (un)helpful.

Problem you have encountered:

GCP supports adding resource manager tags to Compute Instances, Compute Images, Compute Disks, Compute Snapshots, Storage Buckets, Filestore Instances, Filestore Backups resources and we can successfully bind tags to these resources. But except for Compute Instances and Storage Buckets, tags attached to other listed resources are not displayed when viewing the resource in console or when described using gcloud CLI.

What you expected to happen:

Console and gcloud CLI describe command should list the tags attached to resources which support resource manager tags.

Steps to reproduce:

Create a Compute Image, Compute Disk, Compute Snapshot, Filestore Instance, Filestore Backup resources using gcloud commands or through console.
Add resource tags to above created resources using gcloud commands

$ gcloud resource-manager tags bindings create --tag-value=<tagValue> --parent=//file.googleapis.com/projects/<projectID>/locations/<zone>/instances/<instance_name> --location=<zone>

$ gcloud resource-manager tags bindings create --tag-value=<tagValue> --parent=//file.googleapis.com/projects/<projectID>/locations/<zone>/backups/<snapshot_name> --location=<zone>

$ gcloud resource-manager tags bindings create --tag-value=<tagValue> --parent=//compute.googleapis.com/projects/<projectID>/zones/<zone>/disks/<disk_id> --location=<zone>

$ gcloud resource-manager tags bindings create --tag-value=<tagValue> --parent=//compute.googleapis.com/projects/<projectID>/global/snapshots/<snapshot_id>

$ gcloud resource-manager tags bindings create --tag-value=<tagValue> --parent=//compute.googleapis.com/projects/<projectID>/global/images/<image_id>

Other information (workarounds you have tried, documentation consulted, etc): Documentation: https://cloud.google.com/resource-manager/docs/tags/tags-supported-services#supported_service_resources

Comments

va...@google.com <va...@google.com> Aug 4, 2023 06:12AM

Assigned to ku...@google.com.

ku...@google.com <ku...@google.com> Aug 4, 2023 10:20AM

Status: New

ka...@google.com <ka...@google.com> Aug 7, 2023 02:13AM

Assigned to ka...@google.com.

ry...@google.com <ry...@google.com> #2Aug 7, 2023 04:29AM

Hello,

Thank you for posting on the Public Issue Tracker.

The same feature request, however, has been submitted earlier and is still being reviewed by the Google Cloud Storage engineering team. Currently, we don't have an ETA for its resolution but I'd recommend you to star the original thread in order to be notified once there's an update. Also, please feel free to comment on that thread to add any additional information to it.

Have a nice day.

ry...@google.com <ry...@google.com> #3Aug 7, 2023 06:16AM

Reassigned to bs...@google.com.

Hello, Thank you for pointing that out! Strangely I didn't find that issue when searched by text. I will star and monitor that original feature request. Hope it starts moving soon!

ka...@google.com <ka...@google.com> #4Aug 7, 2023 01:48PM

Though your issue is more convincing than the original one. So I'll copy it there if that can help ^^

pr...@google.com <pr...@google.com> Aug 26, 2023 09:47PM

Assigned to bs...@google.com.

bh...@redhat.com <bh...@redhat.com> #5Sep 29, 2023 03:07AM

Hello,

Could you please let me know the tentative timeframe for the fix, it would help me in my planning.

Thanks and Regards.

bs...@google.com <bs...@google.com> #6Oct 4, 2023 06:10AM

Could you please confirm that you are passing the resource names in the correct format?

bh...@redhat.com <bh...@redhat.com> #7Oct 4, 2023 03:14PM

Yes, I am getting the success response for tag binding operation and when the resource is described, the response has the correct details of the resource queried except for the tag bindings information. When resource is checked using the UI, it displays all attributes of the resource, except the tag details.

https://cloud.google.com/resource-manager/docs/tags/tags-supported-services#supported_service_resources lists filestore Instances, Backup resources support tags and attaching tags also works, but there are no means of listing the attached tags.

Below is the response received for attaching tags to a filestore instance.

$ gcloud resource-manager tags bindings create --tag-value=openshift-gce-devel/test4/test4 --parent=//file.googleapis.com/projects/openshift-gce-devel/locations/asia-south1-a/instances/pvc-d02f27f2-a21d-4e43-8227-1d8180ae8447 --location=asia-south1-a
done: true
response:
  '@type': type.googleapis.com/google.cloud.resourcemanager.v3.TagBinding
  name: tagBindings/%2F%2Ffile.googleapis.com%2Fprojects%2F1043659492591%2Flocations%2Fasia-south1-a%2Finstances%2Fpvc-d02f27f2-a21d-4e43-8227-1d8180ae8447/tagValues/281476071422546
  parent: //file.googleapis.com/projects/1043659492591/locations/asia-south1-a/instances/pvc-d02f27f2-a21d-4e43-8227-1d8180ae8447
  tagValue: tagValues/281476071422546
  tagValueNamespacedName: openshift-gce-devel/test4/test4

Below is the response received for querying the filestore instance resource, which doesn't have the tag just added.

$ gcloud filestore instances describe pvc-d02f27f2-a21d-4e43-8227-1d8180ae8447 --location=asia-south1-a
createTime: '2023-10-02T13:50:01.250051842Z'
fileShares:
- capacityGb: '1024'
  name: vol1
labels:
  createdby: bhb
  env: dev
  kubernetes-io-cluster-bhb-s24fv: owned
  storage_gke_io_created-by: filestore_csi_storage_gke_io
name: projects/openshift-gce-devel/locations/asia-south1-a/instances/pvc-d02f27f2-a21d-4e43-8227-1d8180ae8447
networks:
- connectMode: DIRECT_PEERING
  ipAddresses:
  - 10.101.205.34
  modes:
  - MODE_IPV4
  network: bhb-s24fv-network
  reservedIpRange: 10.101.205.32/29
state: READY
tier: STANDARD

PFA the screenshot of UI with the details of filestore instance resource and also service supporting tags details.

P.S. It's the same for other resources mentioned in the ticket as well.

Message last modified on Oct 4, 2023 03:16PM

Screenshot from 2023-10-04 20-44-11.png

8.6 KB

View

Download

Screenshot from 2023-10-04 20-38-09.png

149 KB

View

Download

bs...@google.com <bs...@google.com> #8Oct 9, 2023 06:43AM

Could you please try listing the bindings as described in https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing#listing_tags?

bh...@redhat.com <bh...@redhat.com> #9Oct 11, 2023 05:35AM

$ gcloud filestore instances describe test-filestore-instance-tags --location=us-central1-a
createTime: '2023-10-11T05:19:06.596309841Z'
fileShares:
- capacityGb: '1024'
  name: bhb_share
labels:
  createdby: bhb
  env: dev
name: projects/openshift-gce-devel/locations/us-central1-a/instances/test-filestore-instance-tags
networks:
- connectMode: DIRECT_PEERING
  ipAddresses:
  - 10.35.11.10
  modes:
  - MODE_IPV4
  network: default-e2e
  reservedIpRange: 10.35.11.8/29
state: READY
tier: BASIC_HDD

$ gcloud resource-manager tags bindings create --tag-value=openshift-gce-devel/test4/test4 --parent=//file.googleapis.com/projects/openshift-gce-devel/locations/us-central1-a/instances/test-filestore-instance-tags --location=us-central1-a
done: true
response:
  '@type': type.googleapis.com/google.cloud.resourcemanager.v3.TagBinding
  name: tagBindings/%2F%2Ffile.googleapis.com%2Fprojects%2F1043659492591%2Flocations%2Fus-central1-a%2Finstances%2Ftest-filestore-instance-tags/tagValues/281476071422546
  parent: //file.googleapis.com/projects/1043659492591/locations/us-central1-a/instances/test-filestore-instance-tags
  tagValue: tagValues/281476071422546
  tagValueNamespacedName: openshift-gce-devel/test4/test4

$ gcloud filestore instances describe test-filestore-instance-tags --location=us-central1-a
createTime: '2023-10-11T05:19:06.596309841Z'
fileShares:
- capacityGb: '1024'
  name: bhb_share
labels:
  createdby: bhb
  env: dev
name: projects/openshift-gce-devel/locations/us-central1-a/instances/test-filestore-instance-tags
networks:
- connectMode: DIRECT_PEERING
  ipAddresses:
  - 10.35.11.10
  modes:
  - MODE_IPV4
  network: default-e2e
  reservedIpRange: 10.35.11.8/29
state: READY
tier: BASIC_HDD

$ curl -i -X GET -H "Authorization: Bearer $(gcloud auth print-access-token)" -H "Accept:application/json" 'https://us-central1-a-cloudresourcemanager.googleapis.com/v3/tagBindings?parent=%2F%2Ffile.googleapis.com%2Fprojects%2F1043659492591%2Flocations%2Fus-central1-a%2Finstances%2Ftest-filestore-instance-tags'
HTTP/2 200 
content-type: application/json; charset=UTF-8
vary: X-Origin
vary: Referer
vary: Origin,Accept-Encoding
date: Wed, 11 Oct 2023 05:31:27 GMT
server: ESF
cache-control: private
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accept-ranges: none

{
  "tagBindings": [
    {
      "name": "tagBindings/%2F%2Ffile.googleapis.com%2Fprojects%2F1043659492591%2Flocations%2Fus-central1-a%2Finstances%2Ftest-filestore-instance-tags/tagValues/281476071422546",
      "parent": "//file.googleapis.com/projects/1043659492591/locations/us-central1-a/instances/test-filestore-instance-tags",
      "tagValue": "tagValues/281476071422546"
    }
  ]
}

$ curl -i -X GET -H "Authorization: Bearer $(gcloud auth print-access-token)" -H "Accept:application/json" 'https://us-central1-a-cloudresourcemanager.googleapis.com/v3/effectiveTags?parent=%2F%2Ffile.googleapis.com%2Fprojects%2F1043659492591%2Flocations%2Fus-central1-a%2Finstances%2Ftest-filestore-instance-tags'
HTTP/2 200 
content-type: application/json; charset=UTF-8
vary: X-Origin
vary: Referer
vary: Origin,Accept-Encoding
date: Wed, 11 Oct 2023 05:31:12 GMT
server: ESF
cache-control: private
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accept-ranges: none

{
  "effectiveTags": [
    {
      "tagValue": "tagValues/281483998077332",
      "namespacedTagValue": "openshift-gce-devel/test3/test3",
      "tagKey": "tagKeys/281482830535601",
      "namespacedTagKey": "openshift-gce-devel/test3",
      "inherited": true,
      "tagKeyParentName": "projects/1043659492591"
    },
    {
      "tagValue": "tagValues/281476071422546",
      "namespacedTagValue": "openshift-gce-devel/test4/test4",
      "tagKey": "tagKeys/281480282555678",
      "namespacedTagKey": "openshift-gce-devel/test4",
      "tagKeyParentName": "projects/1043659492591"
    }
  ]
}

bs...@google.com <bs...@google.com> #10Oct 11, 2023 06:31AM

Could you please try the following command - gcloud resource-manager tags bindings list --parent=RESOURCE_ID --location=LOCATION

bh...@redhat.com <bh...@redhat.com> #11Oct 11, 2023 06:41AM

$ gcloud resource-manager tags bindings list --parent=//file.googleapis.com/projects/1043659492591/locations/us-central1-a/instances/test-filestore-instance-tags --location=us-central1-a
---
name: tagBindings/%2F%2Ffile.googleapis.com%2Fprojects%2F1043659492591%2Flocations%2Fus-central1-a%2Finstances%2Ftest-filestore-instance-tags/tagValues/281476071422546
parent: //file.googleapis.com/projects/1043659492591/locations/us-central1-a/instances/test-filestore-instance-tags
tagValue: tagValues/281476071422546

$ gcloud resource-manager tags bindings list --parent=//file.googleapis.com/projects/1043659492591/locations/us-central1-a/instances/test-filestore-instance-tags --location=us-central1-a --effective
---
inherited: true
namespacedTagKey: openshift-gce-devel/test3
namespacedTagValue: openshift-gce-devel/test3/test3
tagKey: tagKeys/281482830535601
tagKeyParentName: projects/1043659492591
tagValue: tagValues/281483998077332
---
namespacedTagKey: openshift-gce-devel/test4
namespacedTagValue: openshift-gce-devel/test4/test4
tagKey: tagKeys/281480282555678
tagKeyParentName: projects/1043659492591
tagValue: tagValues/281476071422546

bs...@google.com <bs...@google.com> #12Oct 11, 2023 06:42AM

Looks like the tag bindings are visible, as expected. Is there something unexpected about this output?

bh...@redhat.com <bh...@redhat.com> #13Oct 11, 2023 06:59AM

Yes tag bindings on resources get listed when tag specific APIs are used. My concern or expected behavior is, the console doesn't list the attached tags, like for Compute Instance or Storage Bucket.

bs...@google.com <bs...@google.com> #14Oct 11, 2023 08:53AM

This feature is not supported as of now.

ja...@google.com <ja...@google.com> #15Oct 13, 2023 04:56AM

Status: Won't Fix (Intended Behavior)

Closing this bug since the functionality is working as expected. Please create another bug if you want to file a feature request.