关于“使用虚拟机 (VM)”的评价

BANALA SRINATH S. · 已于 23 days前审核

KANCHARLA SIVA SANKAR REDDY S. · 已于 23 days前审核

Louis L. · 已于 23 days前审核

student-02-f973111a1b61@qwiklabs.net is requesting a role on the resource qwiklabs-gcp-03-8e671ae249d7. Requestor’s message: "Can not SSH my VM from the console or from the Cloud shell. Access denied due to lack of IAM permissions. iap.tunnelInstances.accessViaIAP" Click the following link to investigate and remediate this request for student-02-f973111a1b61@qwiklabs.net: console.cloud.google.com/iam-admin/troubleshooter/summary;permissions=resourcemanager.projects.setIamPolicy;token=ATRLMDrq_QIy3Wak-OpUAs5AbqfGl3lSnvylP97FEGdKTuFopJ9R5qPYiMfw5KVAEvu1z-kxD1cAYBvP0gXCwcf4T0n5Pr3rhqaIFio6AgZ64tHrSIckGyapKH-zfgcUWqms30GMs1zlbaNUfHfKFBYLgxKD2B4B6reFDa-1r92S0g4ArzqF8Kk3wuQ0Q1_0ky043Afa0e-ERe0B5dpD6xo?utm_campaign=role_request&utm_source=cloud_console

Daniel G. · 已于 23 days前审核

JIGYASA T. · 已于 23 days前审核

Alejandro L. · 已于 23 days前审核

Abraham C. · 已于 23 days前审核

DBOS A. · 已于 23 days前审核

Kevin B. · 已于 23 days前审核

ANURAG SAHU 2. · 已于 23 days前审核

Ronald d. · 已于 23 days前审核

Bashenko M. · 已于 23 days前审核

Bhavani Saikiran M. · 已于 23 days前审核

Issues were there after creating the VM and trying to connect to the server via SSH

Archit C. · 已于 23 days前审核

Imaduddin D. · 已于 23 days前审核

Dany R. · 已于 23 days前审核

lab seems great but I can't connect to my VM via SSH. From the Console, I get: Connection Failed An error occurred while communicating with the SSH server. Check the server and the network configuration. Please consider adding the IAP-secured Tunnel User IAM role (iap.tunnelInstances.accessViaIAP) to start using Cloud IAP for TCP forwarding for better performance. So I tried from Cloud Shell: student_02_42ccfb211282@cloudshell:~ (qwiklabs-gcp-01-fdbbc91d9f88)$ gcloud compute ssh mc-server --project=qwiklabs-gcp-01-fdbbc91d9f88 --zone=us-central1-a --troubleshoot --tunnel-through-iap Starting ssh troubleshooting for instance https://compute.googleapis.com/compute/v1/projects/qwiklabs-gcp-01-fdbbc91d9f88/zones/us-central1-a/instances/mc-server in zone us-central1-a Start time: 2026-04-22 20:08:55.639765 ---- Checking network connectivity ---- The Network Management API is needed to check the VM's network connectivity. If not already enabled, is it OK to enable it and check the VM's network connectivity? (Y/n)? Y Enabling service [networkmanagement.googleapis.com] on project [qwiklabs-gcp-01-fdbbc91d9f88]... Operation "operations/acat.p2-995726339335-ec8439c9-634a-499d-a465-010211f7d68a" finished successfully. Source IP address: 35.235.240.123 (a random IP address from the IAP IPv4 range - 35.235.240.0/20) Destination IP address: 10.128.0.2 (primary internal IPv4 address of the instance) Connectivity Test forward path result: REACHABLE Connectivity Test return path result: REACHABLE To view complete details of this test, see https://console.cloud.google.com/net-intelligence/connectivity/tests/details/ssh-troubleshoot-10bxm?project=qwiklabs-gcp-01-fdbbc91d9f88 Help for connectivity tests: https://cloud.google.com/network-intelligence-center/docs/connectivity-tests/concepts/overview ---- Checking user permissions ---- API [iap.googleapis.com] not enabled on project [qwiklabs-gcp-01-fdbbc91d9f88]. Would you like to enable and retry (this will take a few minutes)? (y/N)? y Enabling service [iap.googleapis.com] on project [qwiklabs-gcp-01-fdbbc91d9f88]... Operation "operations/acat.p2-995726339335-1642a055-c3bf-4c5b-9d83-eea075e1cda6" finished successfully. User permissions: 1 issue(s) found. You need permission to SSH to a private IP address: iap.tunnelInstances.accessViaIAP. Help for IAP permissions: https://cloud.google.com/iap/docs/managing-access ---- Checking VPC settings ---- VPC settings: 1 issue(s) found. There is an issue with your IAP configuration Check the following items: - The IAP firewall rule is valid. - IAP tunneling is enabled. - You are connecting using an IAP token. - You have the IAM role of Project Owner, IAP-Secured Tunnel User, or iap.tunnelInstances.accessViaIAP (preferred) - Your organization hasn't blocked access to external IP addresses. IAP changes the source traffic to 35.235.240.0/20 and the tunnel to https://tunnel.cloudproxy.app. - If your organization blocks access to public IP addresses, try connecting through a bastion server. Help for IAP port forwarding: https://cloud.google.com/iap/docs/using-tcp-forwarding https://cloud.google.com/iap/docs/faq#what_domain_does_for_tcp_use Help for bastion server: https://cloud.google.com/compute/docs/instances/connecting-advanced#bastion_host ---- Checking VM status ---- The Monitoring API is needed to check the VM's Status. If not already enabled, is it OK to enable it and check the VM's Status? (Y/n)? y VM status: 0 issue(s) found. ---- Checking VM boot status ---- VM boot: 0 issue(s) found. But I don't have the required permissions to grant the iap.tunnelInstances.accessVialAP role

Clément C. · 已于 23 days前审核

Davis W. · 已于 23 days前审核

TANUSHA B M 2. · 已于 23 days前审核

Schedule regular backups lab check fails. Annoying.

Benjamin A. · 已于 23 days前审核

Marcin S. · 已于 23 days前审核

Joel Richard Ñ. · 已于 23 days前审核

Augusto C. · 已于 23 days前审核

Harihara V. · 已于 23 days前审核

Joel Richard Ñ. · 已于 23 days前审核