search

GoogleCloudPlatform / pubsec-declarative-toolkit

The GCP PubSec Declarative Toolkit is a collection of declarative solutions to help you on your Journey to Google Cloud. Solutions are designed using Config Connector and deployed using Config Controller.
Apache License 2.0
30 stars 26 forks source link

restrictVpcPeering org policy stops anthos config controller recreation after cluster delete - add kcc project override #914

Open obriensystems opened 3 months ago

obriensystems commented 3 months ago

see #794 There are a couple new organization policies introduced by GCP and forced on all orgs as of a couple months ago that will cause issues creating new GKE clusters unless a project or folder level override on the org policy is added

On anthos cluster create

 gcloud anthos config controller create "$CLUSTER" --location "$REGION" --network "$NETWORK" --subnet "$SUBNET" --master-ipv4-cidr-block="172.16.0.128/28" --full-management

via https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/blob/gh766-script/solutions/setup.sh#L198C2-L198C174

Constraint constraints/compute.restrictVpcPeering violated for project 729005816584. Peering the network projects/gke-prod-na-ne1-dd32/global/networks/gke-n25d53e7a23908121151-bea7-3124-net is not allowed.

see https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/issues/812

and related

794