Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

restrictVpcPeering org policy stops anthos config controller recreation after cluster delete - add kcc project override #914

Open
obriensystems opened this issue Mar 22, 2024 · 0 comments
Assignees
Labels

Comments

@obriensystems
Copy link
Collaborator

see #794
There are a couple new organization policies introduced by GCP and forced on all orgs as of a couple months ago that will cause issues creating new GKE clusters unless a project or folder level override on the org policy is added

On anthos cluster create

 gcloud anthos config controller create "$CLUSTER" --location "$REGION" --network "$NETWORK" --subnet "$SUBNET" --master-ipv4-cidr-block="172.16.0.128/28" --full-management

via
https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/blob/gh766-script/solutions/setup.sh#L198C2-L198C174

Constraint constraints/compute.restrictVpcPeering violated for project 729005816584. Peering the network projects/gke-prod-na-ne1-dd32/global/networks/gke-n25d53e7a23908121151-bea7-3124-net is not allowed.


see
#812

and related
#794

@obriensystems obriensystems self-assigned this Mar 22, 2024
@obriensystems obriensystems changed the title restrictVpcPeering org policy stops anthos config controller recreation after cluster delete restrictVpcPeering org policy stops anthos config controller recreation after cluster delete - add kcc project override Mar 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant