GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit

restrictVpcPeering org policy stops anthos config controller recreation after cluster delete - add kcc project override

Open
#914 0 comments 0 reactions 1 assignee Claimed by @obriensystems View on GitHub
delete
Dominant language
Shell
Stars
36
Forks
26
PR merge metrics
No merged PRs in 30d

Description

see #794
There are a couple new organization policies introduced by GCP and forced on all orgs as of a couple months ago that will cause issues creating new GKE clusters unless a project or folder level override on the org policy is added

On anthos cluster create

```
gcloud anthos config controller create "$CLUSTER" --location "$REGION" --network "$NETWORK" --subnet "$SUBNET" --master-ipv4-cidr-block="172.16.0.128/28" --full-management
```

via
https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/blob/gh766-script/solutions/setup.sh#L198C2-L198C174

```
Constraint constraints/compute.restrictVpcPeering violated for project 729005816584. Peering the network projects/gke-prod-na-ne1-dd32/global/networks/gke-n25d53e7a23908121151-bea7-3124-net is not allowed.

```

see
https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/issues/812

and related
#794

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.