GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit
restrictVpcPeering org policy stops anthos config controller recreation after cluster delete - add kcc project override
- Dominant language
- Shell
- Stars
- 36
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Description
see #794
There are a couple new organization policies introduced by GCP and forced on all orgs as of a couple months ago that will cause issues creating new GKE clusters unless a project or folder level override on the org policy is added
On anthos cluster create
```
gcloud anthos config controller create "$CLUSTER" --location "$REGION" --network "$NETWORK" --subnet "$SUBNET" --master-ipv4-cidr-block="172.16.0.128/28" --full-management
```
via
https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/blob/gh766-script/solutions/setup.sh#L198C2-L198C174
```
Constraint constraints/compute.restrictVpcPeering violated for project 729005816584. Peering the network projects/gke-prod-na-ne1-dd32/global/networks/gke-n25d53e7a23908121151-bea7-3124-net is not allowed.
```
see
https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/issues/812
and related
#794
Contributor guide
Assessment
This issue has not been assessed yet.