Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: Cannot create container inside blob storage with network rules #808

Open
1 task done
nitang22 opened this issue Sep 3, 2024 · 1 comment
Open
1 task done
Labels
bug Something isn't working needs:triage

Comments

@nitang22
Copy link

nitang22 commented Sep 3, 2024

Is there an existing issue for this?

  • I have searched the existing issues

Affected Resource(s)

No response

Resource MRs required to reproduce the bug

No response

Steps to Reproduce

apiVersion: storage.azure.upbound.io/v1beta2
kind: Account
metadata:
  annotations:
    crossplane.io/external-name: genxp0000001nfs
  name: genx-nfs
spec:
  deletionPolicy: Delete
  forProvider:
    accountKind: BlockBlobStorage
    accountReplicationType: ZRS
    accountTier: Premium
    allowNestedItemsToBePublic: false
    blobProperties: {}
    crossTenantReplicationEnabled: true
    enableHttpsTrafficOnly: true
    infrastructureEncryptionEnabled: true
    isHnsEnabled: true
    localUserEnabled: true
    location: East US
    minTlsVersion: TLS1_2
    networkRules:
      defaultAction: Deny
      ipRules:
      - 
      virtualNetworkSubnetIds:
      - 
      - 
    nfsv3Enabled: true
    publicNetworkAccessEnabled: true
    queueEncryptionKeyType: Service
    resourceGroupName:
    sharedAccessKeyEnabled: true
    tableEncryptionKeyType: Service
  initProvider: {}
  managementPolicies:
  - '*'
  providerConfigRef:
    name: crossplane-azure-provider
---
apiVersion: storage.azure.upbound.io/v1beta1
kind: Container
metadata:
  annotations:
    crossplane.io/external-name: dev-nfs
  name: dev-nfs
spec:
  deletionPolicy: Delete
  forProvider:
    containerAccessType: private
    storageAccountName: genxp0000001nfs
  initProvider: {}
  managementPolicies:
  - '*'
  providerConfigRef:
    name: crossplane-azure-provider

What happened?

Warning  CannotObserveExternalResource  1s (x9 over 8m4s)  managed/storage.azure.upbound.io/v1beta1, kind=container  (combined from similar events): failed to observe the resource: [{0 retrieving Container "dev-nfs" (Account "genxp0000001nfs" / Resource Group "rg-lz-npr-eastus-03"): containers.Client#GetProperties: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="AuthorizationFailure" Message="This request is not authorized to perform this operation.\nRequestId:c638949e-d01e-0066-181b-fe3a6d000000\nTime:2024-09-03T16:10:04.6926215Z"  []}]

Relevant Error Output Snippet

No response

Crossplane Version

1.5.0

Provider Version

1.5.0

Kubernetes Version

No response

Kubernetes Distribution

No response

Additional Info

No response

@nitang22 nitang22 added bug Something isn't working needs:triage labels Sep 3, 2024
@nitang22
Copy link
Author

nitang22 commented Sep 3, 2024

Is it related to this? hashicorp/terraform-provider-azurerm#2977

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working needs:triage
Projects
None yet
Development

No branches or pull requests

1 participant