Issue with sandbox for the unit `Application and package management using Helm`

[microsoftdocs]

Issue with sandbox for the unit `Application and package management using Helm`

[MarkKharitonov]

I second this motion. My error is different:

(RequestDisallowedByPolicy) Provisioning of resource(s) for container service learn-helm-deploy-aks in resource group learn-6b0fa189-ae59-4c40-8439-3c9947aee614 failed. Message: Resource 'aks-nodepool1-26028142-vmss' was disallowed by policy. Policy identifiers: '[{"policyAssignment":{"name":"containers-assignment","id":"/providers/Microsoft.Management/managementGroups/eab64c3d-95b6-9f1f-755f-9f8578c31e45/providers/Microsoft.Authorization/policyAssignments/containers-assignment"},"policyDefinition":{"name":"Allowed resource types","id":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c"},"policySetDefinition":{"name":"containers-initiative","id":"/providers/Microsoft.Management/managementGroups/learn-sandbox-prod/providers/Microsoft.Authorization/policySetDefinitions/containers-initiative"},"policyDefinitionReferenceId":"allowed-resource-types_1"}]'.. Details: 
Code: RequestDisallowedByPolicy
Message: Provisioning of resource(s) for container service learn-helm-deploy-aks in resource group learn-6b0fa189-ae59-4c40-8439-3c9947aee614 failed. Message: Resource 'aks-nodepool1-26028142-vmss' was disallowed by policy. Policy identifiers: '[{"policyAssignment":{"name":"containers-assignment","id":"/providers/Microsoft.Management/managementGroups/eab64c3d-95b6-9f1f-755f-9f8578c31e45/providers/Microsoft.Authorization/policyAssignments/containers-assignment"},"policyDefinition":{"name":"Allowed resource types","id":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c"},"policySetDefinition":{"name":"containers-initiative","id":"/providers/Microsoft.Management/managementGroups/learn-sandbox-prod/providers/Microsoft.Authorization/policySetDefinitions/containers-initiative"},"policyDefinitionReferenceId":"allowed-resource-types_1"}]'.. Details: 

The net result is the same - not usable.

[GramanP]

I've just been caught out with these same restrictions:

ERROR: (RequestDisallowedByPolicy) Provisioning of resource(s) for container service learn-helm-deploy-aks in resource group learn-2beebd94-8c38-4c76-bf76-aa920e7896c0 failed. 

Message: Resource 'aks-nodepool1-88580637-vmss' was disallowed by policy. Policy identifiers: '[{"policyAssignment":{"name":"containers-assignment","id":"/providers/Microsoft.Management/managementGroups/eab64c3d-95b6-9f1f-755f-9f8578c31e45/providers/Microsoft.Authorization/policyAssignments/containers-assignment"},"policyDefinition":{"name":"Allowed resource types","id":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c"},"policySetDefinition":{"name":"containers-initiative","id":"/providers/Microsoft.Management/managementGroups/learn-sandbox-prod/providers/Microsoft.Authorization/policySetDefinitions/containers-initiative"},"policyDefinitionReferenceId":"allowed-resource-types_1"}]'.. Details: Code: RequestDisallowedByPolicy

[larrywa]

I had the same problem and finally decided to just copy/paste the commands:

SubscriptionId=$(az account list --query '[0].id' -o tsv)
. <(wget -q -O - https://raw.githubusercontent.com/MicrosoftDocs/mslearn-aks/main/infrastructure/setup/setup.sh ) -s $SubscriptionId -n learn-helm-deploy-aks --use-acr false --install-dot-net false

In my own subscription. That got everything installed but now I'm having an issue with invalid images (see Issue I posted)

[coffeeneer]

It is possible to get this to work with a trial subscription if that is still available to you using the change from the open PR and adding a --location for your region. The default westus region did not work for me due to the per region quota setup for the subscription.

SubscriptionId=$(az account list --query '[0].id' -o tsv)
. <(wget -q -O - https://raw.githubusercontent.com/nemrism/mslearn-aks/setup-location/infrastructure/setup/setup.sh ) -s $SubscriptionId -n learn-helm-deploy-aks --use-acr false --install-dot-net false --region YOURREGIONHERE