Skip to content

Deployment manager UPDATE error #695

Open
@abhi-tomar

Description

Hi

I have created a template to create a security policy in Cloud Armor using the deployment manager. But when i tried to update my existing template and run these command getting these error -

gcloud deployment-manager deployments update sre-cloud-armor-deployment --config=cloud_armor_policy.yaml

The fingerprint of the deployment is b'RJFQy4rbDhAbI_hdXS7fig=='
Waiting for update [operation-1695133398408-605b7000f1b5f-79eaa395-587b134f]...failed.
ERROR: (gcloud.deployment-manager.deployments.update) Error in Operation [operation-1695133398408-605b7000f1b5f-79eaa395-587b134f]: errors:

  • code: RESOURCE_ERROR
    location: /deployments/sre-cloud-armor-deployment/resources/community-dev-cloud-armor-policy
    message: "{"ResourceType":"gcp-types/compute-v1:securityPolicies","ResourceErrorCode"
    :"400","ResourceErrorMessage":{"code":400,"errors":[{"domain":"global"
    ,"message":"Invalid value for field 'resource.priority': '10'. Cannot have
    \ rules with the same priorities.","reason":"invalid"}],"message":"Invalid
    \ value for field 'resource.priority': '10'. Cannot have rules with the same priorities."
    ,"statusMessage":"Bad Request","requestPath":"https://compute.googleapis.com/compute/v1/projects/community-dev-519/global/securityPolicies/lia-alb-waf-p-pod-01/addRule\"\
    ,"httpMethod":"POST"}}"

    Does the deployment manager not provide a feature to update existing template resources? If not please provide any alternate solution we can automate here

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions