Cloud Build fails with resource location constraint











up vote
0
down vote

favorite












We have a policy in place which restricts resources to EU regions.



When I try to execute a cloud build, gcloud wants to create a bucket (gs://[PROJECT_ID]_cloudbuild) to store staging sources. This step fails, because the default bucket location ('us') is used:



"code": 412,
"message": "'us' violates constraint ‘constraints/gcp.resourceLocations’"


As a workaround I tried to pass an existing bucket located in a valid region (using --gcs-source-staging-dir), but I got the same error.



How can this be solved?



Here the HTTP logs:



$ gcloud --log-http builds submit --gcs-source-staging-dir gs://my-custom-bucket/staging 
--tag gcr.io/xxxxxxxxxx/quickstart-image .
=======================
==== request start ====
uri: https://www.googleapis.com/storage/v1/b?project=xxxxxxxxxx&alt=json
method: POST
== headers start ==
accept: application/json
content-type: application/json
== headers end ==
== body start ==
{"name": "my-custom-bucket"}
== body end ==
==== request end ====
---- response start ----
-- headers start --
server: UploadServer
status: 412
-- headers end --
-- body start --
{
"error": {
"errors": [
{
"domain": "global",
"reason": "conditionNotMet",
"message": "'us' violates constraint ‘constraints/gcp.resourceLocations’",
"locationType": "header",
"location": "If-Match"
}
],
"code": 412,
"message": "'us' violates constraint ‘constraints/gcp.resourceLocations’"
}
}

-- body end --
---- response end ----
----------------------
ERROR: (gcloud.builds.submit) HTTPError 412: 'us' violates constraint ‘constraints/gcp.resourceLocations’









share|improve this question




























    up vote
    0
    down vote

    favorite












    We have a policy in place which restricts resources to EU regions.



    When I try to execute a cloud build, gcloud wants to create a bucket (gs://[PROJECT_ID]_cloudbuild) to store staging sources. This step fails, because the default bucket location ('us') is used:



    "code": 412,
    "message": "'us' violates constraint ‘constraints/gcp.resourceLocations’"


    As a workaround I tried to pass an existing bucket located in a valid region (using --gcs-source-staging-dir), but I got the same error.



    How can this be solved?



    Here the HTTP logs:



    $ gcloud --log-http builds submit --gcs-source-staging-dir gs://my-custom-bucket/staging 
    --tag gcr.io/xxxxxxxxxx/quickstart-image .
    =======================
    ==== request start ====
    uri: https://www.googleapis.com/storage/v1/b?project=xxxxxxxxxx&alt=json
    method: POST
    == headers start ==
    accept: application/json
    content-type: application/json
    == headers end ==
    == body start ==
    {"name": "my-custom-bucket"}
    == body end ==
    ==== request end ====
    ---- response start ----
    -- headers start --
    server: UploadServer
    status: 412
    -- headers end --
    -- body start --
    {
    "error": {
    "errors": [
    {
    "domain": "global",
    "reason": "conditionNotMet",
    "message": "'us' violates constraint ‘constraints/gcp.resourceLocations’",
    "locationType": "header",
    "location": "If-Match"
    }
    ],
    "code": 412,
    "message": "'us' violates constraint ‘constraints/gcp.resourceLocations’"
    }
    }

    -- body end --
    ---- response end ----
    ----------------------
    ERROR: (gcloud.builds.submit) HTTPError 412: 'us' violates constraint ‘constraints/gcp.resourceLocations’









    share|improve this question


























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      We have a policy in place which restricts resources to EU regions.



      When I try to execute a cloud build, gcloud wants to create a bucket (gs://[PROJECT_ID]_cloudbuild) to store staging sources. This step fails, because the default bucket location ('us') is used:



      "code": 412,
      "message": "'us' violates constraint ‘constraints/gcp.resourceLocations’"


      As a workaround I tried to pass an existing bucket located in a valid region (using --gcs-source-staging-dir), but I got the same error.



      How can this be solved?



      Here the HTTP logs:



      $ gcloud --log-http builds submit --gcs-source-staging-dir gs://my-custom-bucket/staging 
      --tag gcr.io/xxxxxxxxxx/quickstart-image .
      =======================
      ==== request start ====
      uri: https://www.googleapis.com/storage/v1/b?project=xxxxxxxxxx&alt=json
      method: POST
      == headers start ==
      accept: application/json
      content-type: application/json
      == headers end ==
      == body start ==
      {"name": "my-custom-bucket"}
      == body end ==
      ==== request end ====
      ---- response start ----
      -- headers start --
      server: UploadServer
      status: 412
      -- headers end --
      -- body start --
      {
      "error": {
      "errors": [
      {
      "domain": "global",
      "reason": "conditionNotMet",
      "message": "'us' violates constraint ‘constraints/gcp.resourceLocations’",
      "locationType": "header",
      "location": "If-Match"
      }
      ],
      "code": 412,
      "message": "'us' violates constraint ‘constraints/gcp.resourceLocations’"
      }
      }

      -- body end --
      ---- response end ----
      ----------------------
      ERROR: (gcloud.builds.submit) HTTPError 412: 'us' violates constraint ‘constraints/gcp.resourceLocations’









      share|improve this question















      We have a policy in place which restricts resources to EU regions.



      When I try to execute a cloud build, gcloud wants to create a bucket (gs://[PROJECT_ID]_cloudbuild) to store staging sources. This step fails, because the default bucket location ('us') is used:



      "code": 412,
      "message": "'us' violates constraint ‘constraints/gcp.resourceLocations’"


      As a workaround I tried to pass an existing bucket located in a valid region (using --gcs-source-staging-dir), but I got the same error.



      How can this be solved?



      Here the HTTP logs:



      $ gcloud --log-http builds submit --gcs-source-staging-dir gs://my-custom-bucket/staging 
      --tag gcr.io/xxxxxxxxxx/quickstart-image .
      =======================
      ==== request start ====
      uri: https://www.googleapis.com/storage/v1/b?project=xxxxxxxxxx&alt=json
      method: POST
      == headers start ==
      accept: application/json
      content-type: application/json
      == headers end ==
      == body start ==
      {"name": "my-custom-bucket"}
      == body end ==
      ==== request end ====
      ---- response start ----
      -- headers start --
      server: UploadServer
      status: 412
      -- headers end --
      -- body start --
      {
      "error": {
      "errors": [
      {
      "domain": "global",
      "reason": "conditionNotMet",
      "message": "'us' violates constraint ‘constraints/gcp.resourceLocations’",
      "locationType": "header",
      "location": "If-Match"
      }
      ],
      "code": 412,
      "message": "'us' violates constraint ‘constraints/gcp.resourceLocations’"
      }
      }

      -- body end --
      ---- response end ----
      ----------------------
      ERROR: (gcloud.builds.submit) HTTPError 412: 'us' violates constraint ‘constraints/gcp.resourceLocations’






      google-cloud-platform






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Nov 8 at 12:46

























      asked Nov 8 at 11:17









      Black

      738




      738
























          1 Answer
          1






          active

          oldest

          votes

















          up vote
          0
          down vote













          Cloud Build will use a default bucket to store logs. You can try to add logsBucket field to the build config file with a specific bucket like in the snippet:



          steps:
          - name: 'gcr.io/cloud-builders/go'
          args: ['install', '.']
          logsBucket: 'gs://mybucket'


          You can find detailed information about the build configuration file here






          share|improve this answer





















          • The problem is not the logs dir but the staging dir.
            – Black
            Nov 8 at 12:44










          • Sorry Black, I misunderstood your question at a first glance. Since you are using "Resource Location Restriction", the way to go is --gcs-source-staging-dir as you have done. Did you check if the user/service account gcloud is logged in has write access to the custom bucket location?
            – dhauptman
            Nov 8 at 14:34












          • Permissions are fine. As you can see in the logs the API for bucket creation is called without location property (which defaults to 'us' location as per API documentation: https://cloud.google.com/storage/docs/json_api/v1/buckets/insert ).
            – Black
            Nov 8 at 15:08












          • Maybe is worth to change the location of the Container Registry where the image is hosted. 'gcr.io' hosts the images in the United States. You can tag your image with 'eu.gcr.io' host name for example. In this documentation you can find more options.
            – dhauptman
            Nov 8 at 15:58










          • This was one of the things I tried, without success.
            – Black
            Nov 8 at 16:09











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














           

          draft saved


          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53206667%2fcloud-build-fails-with-resource-location-constraint%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          1 Answer
          1






          active

          oldest

          votes








          1 Answer
          1






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          up vote
          0
          down vote













          Cloud Build will use a default bucket to store logs. You can try to add logsBucket field to the build config file with a specific bucket like in the snippet:



          steps:
          - name: 'gcr.io/cloud-builders/go'
          args: ['install', '.']
          logsBucket: 'gs://mybucket'


          You can find detailed information about the build configuration file here






          share|improve this answer





















          • The problem is not the logs dir but the staging dir.
            – Black
            Nov 8 at 12:44










          • Sorry Black, I misunderstood your question at a first glance. Since you are using "Resource Location Restriction", the way to go is --gcs-source-staging-dir as you have done. Did you check if the user/service account gcloud is logged in has write access to the custom bucket location?
            – dhauptman
            Nov 8 at 14:34












          • Permissions are fine. As you can see in the logs the API for bucket creation is called without location property (which defaults to 'us' location as per API documentation: https://cloud.google.com/storage/docs/json_api/v1/buckets/insert ).
            – Black
            Nov 8 at 15:08












          • Maybe is worth to change the location of the Container Registry where the image is hosted. 'gcr.io' hosts the images in the United States. You can tag your image with 'eu.gcr.io' host name for example. In this documentation you can find more options.
            – dhauptman
            Nov 8 at 15:58










          • This was one of the things I tried, without success.
            – Black
            Nov 8 at 16:09















          up vote
          0
          down vote













          Cloud Build will use a default bucket to store logs. You can try to add logsBucket field to the build config file with a specific bucket like in the snippet:



          steps:
          - name: 'gcr.io/cloud-builders/go'
          args: ['install', '.']
          logsBucket: 'gs://mybucket'


          You can find detailed information about the build configuration file here






          share|improve this answer





















          • The problem is not the logs dir but the staging dir.
            – Black
            Nov 8 at 12:44










          • Sorry Black, I misunderstood your question at a first glance. Since you are using "Resource Location Restriction", the way to go is --gcs-source-staging-dir as you have done. Did you check if the user/service account gcloud is logged in has write access to the custom bucket location?
            – dhauptman
            Nov 8 at 14:34












          • Permissions are fine. As you can see in the logs the API for bucket creation is called without location property (which defaults to 'us' location as per API documentation: https://cloud.google.com/storage/docs/json_api/v1/buckets/insert ).
            – Black
            Nov 8 at 15:08












          • Maybe is worth to change the location of the Container Registry where the image is hosted. 'gcr.io' hosts the images in the United States. You can tag your image with 'eu.gcr.io' host name for example. In this documentation you can find more options.
            – dhauptman
            Nov 8 at 15:58










          • This was one of the things I tried, without success.
            – Black
            Nov 8 at 16:09













          up vote
          0
          down vote










          up vote
          0
          down vote









          Cloud Build will use a default bucket to store logs. You can try to add logsBucket field to the build config file with a specific bucket like in the snippet:



          steps:
          - name: 'gcr.io/cloud-builders/go'
          args: ['install', '.']
          logsBucket: 'gs://mybucket'


          You can find detailed information about the build configuration file here






          share|improve this answer












          Cloud Build will use a default bucket to store logs. You can try to add logsBucket field to the build config file with a specific bucket like in the snippet:



          steps:
          - name: 'gcr.io/cloud-builders/go'
          args: ['install', '.']
          logsBucket: 'gs://mybucket'


          You can find detailed information about the build configuration file here







          share|improve this answer












          share|improve this answer



          share|improve this answer










          answered Nov 8 at 12:18









          dhauptman

          1055




          1055












          • The problem is not the logs dir but the staging dir.
            – Black
            Nov 8 at 12:44










          • Sorry Black, I misunderstood your question at a first glance. Since you are using "Resource Location Restriction", the way to go is --gcs-source-staging-dir as you have done. Did you check if the user/service account gcloud is logged in has write access to the custom bucket location?
            – dhauptman
            Nov 8 at 14:34












          • Permissions are fine. As you can see in the logs the API for bucket creation is called without location property (which defaults to 'us' location as per API documentation: https://cloud.google.com/storage/docs/json_api/v1/buckets/insert ).
            – Black
            Nov 8 at 15:08












          • Maybe is worth to change the location of the Container Registry where the image is hosted. 'gcr.io' hosts the images in the United States. You can tag your image with 'eu.gcr.io' host name for example. In this documentation you can find more options.
            – dhauptman
            Nov 8 at 15:58










          • This was one of the things I tried, without success.
            – Black
            Nov 8 at 16:09


















          • The problem is not the logs dir but the staging dir.
            – Black
            Nov 8 at 12:44










          • Sorry Black, I misunderstood your question at a first glance. Since you are using "Resource Location Restriction", the way to go is --gcs-source-staging-dir as you have done. Did you check if the user/service account gcloud is logged in has write access to the custom bucket location?
            – dhauptman
            Nov 8 at 14:34












          • Permissions are fine. As you can see in the logs the API for bucket creation is called without location property (which defaults to 'us' location as per API documentation: https://cloud.google.com/storage/docs/json_api/v1/buckets/insert ).
            – Black
            Nov 8 at 15:08












          • Maybe is worth to change the location of the Container Registry where the image is hosted. 'gcr.io' hosts the images in the United States. You can tag your image with 'eu.gcr.io' host name for example. In this documentation you can find more options.
            – dhauptman
            Nov 8 at 15:58










          • This was one of the things I tried, without success.
            – Black
            Nov 8 at 16:09
















          The problem is not the logs dir but the staging dir.
          – Black
          Nov 8 at 12:44




          The problem is not the logs dir but the staging dir.
          – Black
          Nov 8 at 12:44












          Sorry Black, I misunderstood your question at a first glance. Since you are using "Resource Location Restriction", the way to go is --gcs-source-staging-dir as you have done. Did you check if the user/service account gcloud is logged in has write access to the custom bucket location?
          – dhauptman
          Nov 8 at 14:34






          Sorry Black, I misunderstood your question at a first glance. Since you are using "Resource Location Restriction", the way to go is --gcs-source-staging-dir as you have done. Did you check if the user/service account gcloud is logged in has write access to the custom bucket location?
          – dhauptman
          Nov 8 at 14:34














          Permissions are fine. As you can see in the logs the API for bucket creation is called without location property (which defaults to 'us' location as per API documentation: https://cloud.google.com/storage/docs/json_api/v1/buckets/insert ).
          – Black
          Nov 8 at 15:08






          Permissions are fine. As you can see in the logs the API for bucket creation is called without location property (which defaults to 'us' location as per API documentation: https://cloud.google.com/storage/docs/json_api/v1/buckets/insert ).
          – Black
          Nov 8 at 15:08














          Maybe is worth to change the location of the Container Registry where the image is hosted. 'gcr.io' hosts the images in the United States. You can tag your image with 'eu.gcr.io' host name for example. In this documentation you can find more options.
          – dhauptman
          Nov 8 at 15:58




          Maybe is worth to change the location of the Container Registry where the image is hosted. 'gcr.io' hosts the images in the United States. You can tag your image with 'eu.gcr.io' host name for example. In this documentation you can find more options.
          – dhauptman
          Nov 8 at 15:58












          This was one of the things I tried, without success.
          – Black
          Nov 8 at 16:09




          This was one of the things I tried, without success.
          – Black
          Nov 8 at 16:09


















           

          draft saved


          draft discarded



















































           


          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53206667%2fcloud-build-fails-with-resource-location-constraint%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          鏡平學校

          ꓛꓣだゔៀៅຸ໢ທຮ໕໒ ,ໂ'໥໓າ໼ឨឲ៵៭ៈゎゔit''䖳𥁄卿' ☨₤₨こゎもょの;ꜹꟚꞖꞵꟅꞛေၦေɯ,ɨɡ𛃵𛁹ޝ޳ޠ޾,ޤޒޯ޾𫝒𫠁သ𛅤チョ'サノބޘދ𛁐ᶿᶇᶀᶋᶠ㨑㽹⻮ꧬ꧹؍۩وَؠ㇕㇃㇪ ㇦㇋㇋ṜẰᵡᴠ 軌ᵕ搜۳ٰޗޮ޷ސޯ𫖾𫅀ल, ꙭ꙰ꚅꙁꚊꞻꝔ꟠Ꝭㄤﺟޱސꧨꧼ꧴ꧯꧽ꧲ꧯ'⽹⽭⾁⿞⼳⽋២៩ញណើꩯꩤ꩸ꩮᶻᶺᶧᶂ𫳲𫪭𬸄𫵰𬖩𬫣𬊉ၲ𛅬㕦䬺𫝌𫝼,,𫟖𫞽ហៅ஫㆔ాఆఅꙒꚞꙍ,Ꙟ꙱エ ,ポテ,フࢰࢯ𫟠𫞶 𫝤𫟠ﺕﹱﻜﻣ𪵕𪭸𪻆𪾩𫔷ġ,ŧآꞪ꟥,ꞔꝻ♚☹⛵𛀌ꬷꭞȄƁƪƬșƦǙǗdžƝǯǧⱦⱰꓕꓢႋ神 ဴ၀க௭எ௫ឫោ ' េㇷㇴㇼ神ㇸㇲㇽㇴㇼㇻㇸ'ㇸㇿㇸㇹㇰㆣꓚꓤ₡₧ ㄨㄟ㄂ㄖㄎ໗ツڒذ₶।ऩछएोञयूटक़कयँृी,冬'𛅢𛅥ㇱㇵㇶ𥄥𦒽𠣧𠊓𧢖𥞘𩔋цѰㄠſtʯʭɿʆʗʍʩɷɛ,əʏダヵㄐㄘR{gỚṖḺờṠṫảḙḭᴮᵏᴘᵀᵷᵕᴜᴏᵾq﮲ﲿﴽﭙ軌ﰬﶚﶧ﫲Ҝжюїкӈㇴffצּ﬘﭅﬈軌'ffistfflſtffतभफɳɰʊɲʎ𛁱𛁖𛁮𛀉 𛂯𛀞నఋŀŲ 𫟲𫠖𫞺ຆຆ ໹້໕໗ๆทԊꧢꧠ꧰ꓱ⿝⼑ŎḬẃẖỐẅ ,ờỰỈỗﮊDžȩꭏꭎꬻ꭮ꬿꭖꭥꭅ㇭神 ⾈ꓵꓑ⺄㄄ㄪㄙㄅㄇstA۵䞽ॶ𫞑𫝄㇉㇇゜軌𩜛𩳠Jﻺ‚Üမ႕ႌႊၐၸဓၞၞၡ៸wyvtᶎᶪᶹစဎ꣡꣰꣢꣤ٗ؋لㇳㇾㇻㇱ㆐㆔,,㆟Ⱶヤマފ޼ޝަݿݞݠݷݐ',ݘ,ݪݙݵ𬝉𬜁𫝨𫞘くせぉて¼óû×ó£…𛅑הㄙくԗԀ5606神45,神796'𪤻𫞧ꓐ㄁ㄘɥɺꓵꓲ3''7034׉ⱦⱠˆ“𫝋ȍ,ꩲ軌꩷ꩶꩧꩫఞ۔فڱێظペサ神ナᴦᵑ47 9238їﻂ䐊䔉㠸﬎ffiﬣ,לּᴷᴦᵛᵽ,ᴨᵤ ᵸᵥᴗᵈꚏꚉꚟ⻆rtǟƴ𬎎

          Why https connections are so slow when debugging (stepping over) in Java?