Azure / kubeflow-aks

Official repository for the Kubeflow on Azure and AKS project
https://azure.github.io/kubeflow-aks/main/
MIT License
24 stars 17 forks source link

effect policy should be 'audit' instead of Audit #19

Open shiyu15 opened 1 year ago

shiyu15 commented 1 year ago
{
    "status": "Failed",
    "error": {
        "code": "DeploymentFailed",
        "target": "/subscriptions/3026b054-670d-4bab-9a4b-7749cc879181/resourceGroups/kubeflow/providers/Microsoft.Resources/deployments/main",
        "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.",
        "details": [
            {
                "code": "ResourceDeploymentFailure",
                "target": "/subscriptions/3026b054-670d-4bab-9a4b-7749cc879181/resourceGroups/kubeflow/providers/Microsoft.Resources/deployments/aksconstruction",
                "message": "The resource write operation failed to complete successfully, because it reached terminal provisioning state 'Failed'.",
                "details": [
                    {
                        "code": "DeploymentFailed",
                        "target": "/subscriptions/3026b054-670d-4bab-9a4b-7749cc879181/resourceGroups/kubeflow/providers/Microsoft.Resources/deployments/aksconstruction",
                        "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.",
                        "details": [
                            {
                                "code": "PolicyParameterValueNotAllowed",
                                "message": "The value 'audit' is not allowed for policy parameter 'effect' in policy definition 'a8640108-9b0a-4a28-b8ca-1696c838647d'. The allowed values are 'Audit, Deny, Disabled'."
                            }
                        ]
                    }
                ]
            }
        ]
    }
}

when i deploy kubeflow on azure according to this repository,i met the error above. Then i change the line 1367 of aks-construction/bicep/main.bicep. i change the old value azurepolicy to new value 'Audit', then i succeed in deployment. The azurepolicy defined in outer main.bicep is audit, causing this bug. hope you can fix it.

      effect: {
        value: 'Audit'
      }
seenu433 commented 10 months ago

@shiyu15 - validated the steps and they worked fine without any issue with the value 'audit' in the main.bicep file. Please let us know if there were any other tweaks made to run into this issue.

cc: @mosabami