Region Mismatch Error Between Cloud Volumes ONTAP and Custom Azure Key Vault
Applies to
- BlueXP Connector
- Working Environment (WE)
- Cloud Volumes ONTAP (CVO)
- Custom Azure key vault
Issue
- When creating a new Working Environment using API call and disk encryption with custom key vault, the deployment fails with error that CVO and Vault region doesn't match:
{ "message": "Azure CMEK supported only when the CVO and the vault in the same region. CVO region: uksouth. Vault region: UK South", "causeMessage": "BadRequestException: Azure CMEK supported only when the CVO and the vault in the same region. CVO region: uksouth. Vault region: UK South" }
- If CVO
region
is manually set toUK South
in deploymentJSON file
:
{
"name": "CVO_cluster1",
"tenantId": "workspace-NETAPP",
"region": "UK South",
"packageName": "azure_fastest",
"dataEncryptionType": "AZURE",
"vsaMetadata": {
"ontapVersion": "ONTAP-9.14.1RC1.T1.azure",
"licenseType": "capacity-paygo",
"instanceType": "Standard_DS5_v2",
"capacityPackageName": "Professional"
},
"nssAccount": "UUID",
"writingSpeedState": "NORMAL",
"subnetId": "Subnet",
"svmPassword": "Password",
"vnetId": "VNET",
"cidr": "10.0.0.0/16",
"ontapEncryptionParameters": null,
"securityGroupId": "SecurityGroup",
"skipSnapshots": false,
"diskSize": {
"size": 8,
"unit": "TB",
"_identifier": "8 TB"
},
"storageType": "Premium_LRS",
"azureTags": [],
"subscriptionId": "Subscription",
"saasSubscriptionId": null,
"cloudProviderAccount": "ManagedServiceIdentity",
"backupVolumesToCbs": false,
"enableCompliance": false,
"availabilityZone": null,
"resourceGroup": "ResourceGroup",
"azureEncryptionParameters": {
"key": "customvaultKEY",
"vaultName": "OLD_VAULT"
}
}
BlueXP will fail to find valid configuration for specified ONTAP version:
"causeMessage": "InvalidMetadataException: There is no valid configuration for Ontap Version ONTAP-9.14.1RC1.T1.azure, license capacity-paygo, instance type Standard_DS5_v2, region UK South, saas-mp true."