Apigee-X provisioning via gcloud commandline does not work

[jbriend]

When using the following command to provision an eval org

gcloud alpha apigee organizations provision --authorized-network=default --analytics-region=us-central1 --runtime-location=us-central1-a

I always get the following error:

Details: invalid network "default"

If I use the wizard UI, it works (I often face failures, but after 2-3 retries I get it working).

Is there an issue with the gcloud API ?

PS: activating the HTTP logs (via --log-http), returns me the following HTTP response:

---- response start ----
status: 400
-- headers start --
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Thu, 24 Jun 2021 12:25:34 GMT
Server: ESF
Transfer-Encoding: chunked
Vary: Origin, X-Origin, Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 0
-- headers end --
-- body start --
{
  "error": {
    "code": 400,
    "message": "invalid network \"default\"",
    "status": "INVALID_ARGUMENT",
    "details": [
      {
        "@type": "type.googleapis.com/google.rpc.RequestInfo",
        "requestId": "14291651897767215316"
      }
    ]
  }
}
-- body end --

[kurtkanaskie]

Hi @jbriend ,

Firstly, there is an issue currently with provisioning that is affected by a GCP GKE release that started on 6/22.

I've used the that command often, so not sure about your particular issue, are you certain you have a "default" network in the project that is active?

Thanks for the type on using --log-http

[jbriend]

Yes, the "default" network exists.

The same values are working fine with the wizard UI.

[cwajh]

In addition to the network not existing, this error message can happen if the network fails Service Networking validation for some other reason.

For example, the Apigee eval org creates a /22 subnet on the network it's going to use; a network will be rejected if it doesn't have a big enough IP range free to allow that.