IaasConfigurationVerifier Azure - No registered resource provider found for location

Products

• Operations Manager

Issue/Introduction

During an Apply Changes operation, the pre-deploy check fails on the BOSH Director tile with the following error:

 director: p-bosh-<guid>
    Error: verifier: IaasConfigurationVerifier
    Why: IaaS default: An unknown error has occurred: Azure::Armrest::BadRequestException:
    'No registered resource provider found for location '<azure-region>' and API version
    '<api-version>' for type 'networkSecurityGroups'. The supported api-versions are
    '<list-of-supported-versions>'.
    type: IaasConfigurationVerifier
    Disable: `om disable-director-verifiers --type IaasConfigurationVerifier`

Environment

IaaS: Microsoft Azure

Cause

This issue originates in the Ops Manager verifier code rather than the Azure CPI. Ops Manager uses a Ruby gem called azure-armrest to interact with Azure APIs. This gem dynamically selects the API version to use, and there is a flaw in its version selection logic that can result in it choosing an API version not available in all regions.

 

Resolution

Our R&D team has opened a story to replace the usage of this gem as a permanent fix.

As a workaround, if you are not changing the Director's IaaS config currently and are not seeing problems with Apply Changes, then it is safe to disable the following three verifiers via the OpsMan API:

• IaasConfigurationVerifier
• NetworksExistenceVerifier
• AvailabilityZonesVerifier

    om --env <env-file> disable-director-verifiers --type IaasConfigurationVerifier
    om --env <env-file> disable-director-verifiers --type NetworksExistenceVerifier
    om --env <env-file> disable-director-verifiers --type AvailabilityZonesVerifier

API endpoint documentation: https://developer.broadcom.com/xapis/tanzu-operations-manager-api/latest/api/v0/staged/director/verifiers/install_time/verifier_name/put/