在 使用API调用和自定义密钥存储部署时、出现"只有在CVO和存储位于同一区域时才支持Azure CMECK"错误
适用场景
- BlueXP Connector
- 工作环境(我们)
- Cloud Volumes ONTAP (CVO)
- 自定义Azure密钥存储
问题描述
- 使用API调用和磁盘加密创建新的工作环境时、如果使用自定义密钥存储、则部署将失败、并显示错误CVO和存储区域不匹配:
{ "message": "Azure CMEK supported only when the CVO and the vault in the same region. CVO region: uksouth. Vault region: UK South", "causeMessage": "BadRequestException: Azure CMEK supported only when the CVO and the vault in the same region. CVO region: uksouth. Vault region: UK South" }
- 如果
region
UK South
在部署中将CVO手动设置为JSON file
:
{
"name": "CVO_cluster1",
"tenantId": "workspace-NETAPP",
"region": "UK South",
"packageName": "azure_fastest",
"dataEncryptionType": "AZURE",
"vsaMetadata": {
"ontapVersion": "ONTAP-9.14.1RC1.T1.azure",
"licenseType": "capacity-paygo",
"instanceType": "Standard_DS5_v2",
"capacityPackageName": "Professional"
},
"nssAccount": "UUID",
"writingSpeedState": "NORMAL",
"subnetId": "Subnet",
"svmPassword": "Password",
"vnetId": "VNET",
"cidr": "10.0.0.0/16",
"ontapEncryptionParameters": null,
"securityGroupId": "SecurityGroup",
"skipSnapshots": false,
"diskSize": {
"size": 8,
"unit": "TB",
"_identifier": "8 TB"
},
"storageType": "Premium_LRS",
"azureTags": [],
"subscriptionId": "Subscription",
"saasSubscriptionId": null,
"cloudProviderAccount": "ManagedServiceIdentity",
"backupVolumesToCbs": false,
"enableCompliance": false,
"availabilityZone": null,
"resourceGroup": "ResourceGroup",
"azureEncryptionParameters": {
"key": "customvaultKEY",
"vaultName": "OLD_VAULT"
}
}
BlueXP将无法 找到指定ONTAP版本的有效配置:
"causeMessage": "InvalidMetadataException: There is no valid configuration for Ontap Version ONTAP-9.14.1RC1.T1.azure, license capacity-paygo, instance type Standard_DS5_v2, region UK South, saas-mp true."