Troubleshooting the sample deployment

This guide describes troubleshooting steps that you might find helpful if you run into problems deploying the Anthos Sample Deployment.

For details about how to deploy and explore the sample, see the Explore Anthos tutorial.

If an issue occurs during deployment, you can find the relevant error information in the Deployment Manager view. If you see failed to deploy, click View Details, and then click the triangle icon to view all the resources and see what failed.

Service Management API is not enabled (code 403)

Suggested fix: Enable the Service Management API for your chosen project and try deploying again.

Invalid character in project ID (code 400)

If your project is scoped to your domain, the project ID includes the name of the domain followed by a colon (:). Domain-scoped project IDs are a legacy feature.

Suggested fix: Create a new project that is not domain-scoped and try deploying again.

Not enough permissions to create service account

Suggested fix

Ensure that you have the resourcemanager.projects.setIamPolicy permission; typically project Owners or Service Account Admins have this. If you aren't a member of either role, do one of the following:

  • Create a new project (you will automatically be the Owner).
  • Ask the project Owner or Service Account Admin to add you to one of the following roles:
    • roles/owner
    • roles/iam.serviceAccountAdmin

Insufficient quota to satisfy the request

Suggested fix: The deployment requires 17 vCPUs, 64.6 GiB memory, and 410 GiB disk in your chosen zone or region. Ensure that your project has enough resource quota for the deployment. You can check your quota and if necessary, request an increase.

Project does not allow click-to-deploy images

This error occurs if the compute.trustedImagesProjects organization policy constraint is enforced. The Anthos Sample Deployment creates a Compute Engine instance with an image that is used to automate tasks for the Anthos setup and application deployment.

Suggested fix

Do one of the following:

  • Create a new project in your current organization. Ask your Organization Policy Administrator to edit the constraints/compute.trustedImageProjects policy for this project to include projects/click-to-deploy-images.

  • Use another project in a different organization or folder.

Project does not allow IP Forwarding

This error occurs if the compute.vmCanIpForward organization policy constraint is enforced. IP Forwarding is used as part of the sample application.

Suggested fix

Do one of the following:

  • Create a new project in your current organization. Ask your Organization Policy Administrator to edit the constraints/compute.trustedImageProjects policy for this project to include projects/click-to-deploy-images.

  • Use another project in a different organization or folder.

Project requires OS Login

This error occurs if the compute.requireOsLogin organization policy constraint is enforced. OS Login is not currently supported in Google Kubernetes Engine (GKE).

Suggested fix

Do one of the following:

  • Create a new project in your current organization. Ask your Organization Policy Administrator to edit the constraints/compute.trustedImageProjects policy for this project to include projects/click-to-deploy-images.

  • Use another project in a different organization or folder.

GKE clusters fail to deploy

GKE clusters might fail to deploy for various reasons.

Suggested fix

Do one of the following:

  • When you first encounter an error, try to deploy one more time.

  • (Recommended) Delete the project and start again with a new project.

  • Delete the deployment by following the instructions in Deleting the deployment. Do not try to deploy again in the same project without cleanup.

If the error persists, contact your support team, or leave feedback in our survey.

Anthos components fail to deploy

Deployment Manager might fail at any of the following steps during the process:

  • cluster-registration-with-hub
  • anthos-service-mesh-setup
  • anthos-config-management-setup
  • application-deployment

Suggested fix

Do one of the following:

  • When you first encounter an error, try to deploy one more time.

  • (Recommended) Delete the project and start again with a new project.

  • Delete the deployment by following the instructions in Deleting the deployment. Do not try to deploy again in the same project without cleanup.

If the error persists, contact your support team, or leave feedback in our survey.