Azure CVO HA 部署在非区域对中失败,出现错误"This request is not authorized to perform this operation"
适用于
- BlueXP
- Cloud Volumes ONTAP (CVO)
- Microsoft Azure
问题描述
可以在 BlueXP 时间轴中看到错误: This request is not authorized to perform this operation
在 Create Container task
Create Container (6) Failed { "storageAccountName": "rootsaxxxx", "containerName": "blobcontainer", "requestContext": "Create Azure Ha Working Environment", "useProxy": true, "_failure": "This request is not authorized to perform this operation.", "_resourceGroup": "CVO-RG" } Update Storage Account Network Rules Failed { "storageAccount": "rootsaxxxxx", "defaultAction": "Deny", "networkRules": [ { "action": "Allow", "id": "/subscriptions/79f9c07a-xxxxx-yyyy-a761-84c910955d4a/resourceGroups/CVO-RG/providers/Microsoft.Network/virtualNetworks/CVO-vNET/subnets/CVO-SUBNET" }, { "action": "Allow", "id": "/subscriptions/3efcd6c9-zzzz-uuuu-a431-0971b4fd6c2c/resourceGroups/CM-RG/providers/Microsoft.Network/virtualNetworks/CM-VNET/subnets/CM-SUBNET" } ], "_failure": "Validation of network acls failure: ResourceBeingAcledHasWrongLocation:Microsoft.Storage resources in System.Linq.Enumerable+<ExceptIterator>d__73`1[System.String] cannot be ACL-ed to virtual network /subscriptions/79f9c07a-xxxxx-yyyy-a761-84c910955d4a/resourceGroups/CVO-RG/providers/Microsoft.Network/virtualNetworks/CVO-vNET in uksouth. Only resources in uksouth, ukwest can be ACL-ed to virtual networks in uksouth.. Code: NetworkAclsValidationFailure ", "_resourceGroup": "RNB-P-NetAppCvo-NA20-RGRP2" }