Troubleshooting PCF on GCP

Page last updated:

Warning: Pivotal Cloud Foundry (PCF) v2.4 is no longer supported because it has reached the End of General Support (EOGS) phase as defined by the Support Lifecycle Policy. To stay up to date with the latest software and security updates, upgrade to a supported version.

This topic describes how to troubleshoot known issues when deploying Pivotal Cloud Foundry (PCF) on Google Cloud Platform (GCP).

Problems Connecting with Single Sign-On (SSO)

Users may be unable to connect to applications running on PCF using SSO.


SSO does not support multi-subnets.


Ensure that you have configured only one subnet. See Preparing to Deploy Ops Manager on GCP Manually.

Uploading PAS Tile Causes Ops Manager Rails Application Crash

Uploading the Pivotal Application Service (PAS) tile causes the Ops Manager Rails application to crash.


In compressed format, the PAS tile is 5 GB in size. However, when uncompressed during installation, the PAS tile requires additional disk space that can exhaust the space allocated to the boot disk.


Ensure that the boot disk is allocated at least 50 GB of space. See Step 3: Create the Ops Manager VM Instance in Deploying Ops Manager on GCP Manually.

PAS Deployment Fails - MySQL Monitor replication-canary Job

During installation of the PAS tile, the replication-canary job fails to start. The error reported in the installation log resembles the following:

Started updating job mysql_monitor > mysql_monitor/0
(48e7ec82-3cdf-41af-9d0f-90d1f12683c8) (canary). Failed: 'mysql_monitor/0
(48e7ec82-3cdf-41af-9d0f-90d1f12683c8)' is not running after update. 
Review logs for failed jobs: replication-canary (00:05:13)

Error 400007: 'mysql_monitor/0 (48e7ec82-3cdf-41af-9d0f-90d1f12683c8)' 
is not running after update. 
Review logs for failed jobs: replication-canary


This error can appear as a result of incorrect configuration of network traffic and missed communication between the Gorouter and a load balancer.


  1. Make sure you have selected the Forward SSL to PAS Router option in your PAS Network Configuration.

  2. Verify that you have configured the firewall rules properly and that TCP ports 80, 443, 2222, and 8080 are accessible on your GCP load balancers. See Step 5: Create Firewall Rules for the Network in Preparing to Deploy Ops Manager on GCP Manually.

  3. Verify that you have configured the proper SSL certificates on your HTTP(S) load balancer in GCP. See Step 8: Create HTTP Load Balancer in Preparing to Deploy Ops Manager on GCP Manually.

  4. If necessary, re-upload a new certificate and update any required SSL Certificate and SSH Key fields in your PAS network configuration.

Insufficient External Database Permissions

Upgrade issues can be caused when the external database user used for the network policy DB is given insufficient permissions. To avoid this upgrade issue, ensure that the networkpolicyserver database user has the ALL PRIVILEGES permission.