Merge pull request #2213 from k8s-infra-cherrypick-robot/cherry-pick-2208-to-release-1.21

[release-1.21] Return failed precondition googleapi errors

Author: mattcary

pkg/common/utils.go

@@ -103,11 +103,12 @@ var (
 
 	// userErrorCodeMap tells how API error types are translated to error codes.
 	userErrorCodeMap = map[int]codes.Code{
-		http.StatusForbidden:       codes.PermissionDenied,
-		http.StatusBadRequest:      codes.InvalidArgument,
-		http.StatusTooManyRequests: codes.ResourceExhausted,
-		http.StatusNotFound:        codes.NotFound,
-		http.StatusConflict:        codes.FailedPrecondition,
+		http.StatusForbidden:          codes.PermissionDenied,
+		http.StatusBadRequest:         codes.InvalidArgument,
+		http.StatusTooManyRequests:    codes.ResourceExhausted,
+		http.StatusNotFound:           codes.NotFound,
+		http.StatusConflict:           codes.FailedPrecondition,
+		http.StatusPreconditionFailed: codes.FailedPrecondition,
 	}
 
 	validDataCacheMode = []string{DataCacheModeWriteBack, DataCacheModeWriteThrough}

pkg/common/utils_test.go

@@ -1451,6 +1451,11 @@ func TestCodeForError(t *testing.T) {
 			inputErr: &TemporaryError{code: codes.Aborted, err: context.Canceled},
 			expCode:  codes.Aborted,
 		},
+		{
+			name:     "CMEK precondition failed error, under layers of wrapping",
+			inputErr: fmt.Errorf("unknown Insert disk error: %w", &googleapi.Error{Code: http.StatusPreconditionFailed, Message: "CMEK policy violated"}),
+			expCode:  codes.FailedPrecondition,
+		},
 	}
 
 	for _, tc := range testCases {