forseti-security / terraform-google-forseti

A Terraform module for installing Forseti on GCP
Apache License 2.0
132 stars 126 forks source link

Periodic integration test error: sourceIpRangesToNat - The subnetwork is already configured with ALL_IP_RANGES for Nat which conflicts with the specified IpRangeToNatOption options in this Nat #203

Closed jeffmccune closed 4 years ago

jeffmccune commented 5 years ago

I ran into the following sourceIpRangesToNat error while working on #172 and #202. This may be related to #183. This error seems to move between different test suites, we observed simple-example failing with the error, then subsequently passing. Likewise for

Error: Error patching router us-central1/forseti-simple-example-midge: googleapi: Error 400: Invalid value for field 'resource.nats[0].subnetworks[0].sourceIpRangesToNat': ''. The subnetwork is already configured with ALL_IP_RANGES for Nat which conflicts with the specified IpRangeToNatOption options in this Nat., invalid

  on ../../../examples/real_time_enforcer/nat.tf line 41, in resource "google_compute_router_nat" "main":
  41: resource "google_compute_router_nat" "main" {

Here's the build log location. https://concourse.infra.cft.tips/teams/cft/pipelines/terraform-google-forseti/jobs/integration-tests/builds/519#L5d1c3fba:365

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 30 days if no further activity occurs. Thank you for your contributions.