Datastream: Failed to perform tenant project creation

Google Cloud Database
1

Hello!

I have a Datastream problem that never happened to me before. Hoping someone knows how to fix.
My projects are part of organisation. I have all permissions neeed.

When attempting to create any Datastream connection profile regardless if source or destination, it consistently fails with:

  • Error: “Failed to perform tenant project creation”
  • Error code: 10
  • This occurs in all regions

I tried to create a connection profile using

  • GCP Console
  • CLI: gcloud datastream connection-profiles create test-profile --location=us-central1 --type=bigquery --display-name="Test Profile"

Getting always the same error.

Key Findings from Troubleshooting:

  1. The Datastream agent service account is not being created:
  • Expected account ...@gcp-sa-datastream.iam.gserviceaccount.com is missing
  • Other service accounts (compute, container, pubsub) exist and work correctly
  1. All necessary permissions are in place:
  • Owner and Organization Admin roles
  • Project has billing enabled
  1. Required APIs are enabled:

I have a feeling that there is something to do with gcp-sa-datastream.iam.gserviceaccount.com not being created.

Anyone has ideas where its all going wrong?

4 Likes
2

Hey I am having the same issue, did you find a solution?

1 Like
3

I also get the same error from tokyo

4

Found a solution.

  • Navigate to the Datastream page in the GCP console.
  • Click “Private Connectivity".
  • Click “CREATE CONFIGURATION”.
  • Set up the private service even if it does nothing. Just needs to be created
  • Then try creating the connection profile.
5

For some reason, I’m not seeing the option to create the Datastream service account. I don’t have a VPC setup in the project, so I think this may only work if you have a VPC in the project.

6

Same issue here as well.

7

Datastream service account gets created when you enable apis usually. That’s the whole issue here that gcp failed to provision one so Datastrem interface is struggling to create a resource because it doesn’t exist.

Enable your api first. You might not have the same problem at all. Otherwise you can just enable vpc in your project. Don’t have to use it

8

This doesn’t work for me, I don’t have that option.

9

You can create the service account using CLI:


gcloud beta services identity create --service=datastream.googleapis.com --project=<project_name>
2 Likes
10

That’s interesting. Thanks for sharing.

Does this create actual datastream service agent as opposed to service account?

11

Thanks! That works.

12

That worked for me!