使用YAML部署文件作为Azure时，向前斜杠被删除

Question

我试图通过使用PowerShell中的Azure-CLI在Azure中的一个组中部署2个容器。 因为我想要带有私有IP地址的容器，我使用以下模板：

apiVersion: 2022-04-01-preview
name: uptime-kuma
properties:
  containers:
  - name: nginx-with-ssl
    properties:
      image: mcr.microsoft.com/oss/nginx/nginx:1.15.5-alpine
      ports:
      - port: 443
        protocol: TCP
      resources:
        requests:
          cpu: 1.0
          memoryInGB: 1.5
      volumeMounts:
      - name: nginx-config
        mountPath: /etc/nginx
  - name: uptime-kuma-app
    properties:
      image: louislam/uptime-kuma:latest
      ports:
      - port: 3001
        protocol: TCP
      resources:
        requests:
          cpu: 1.0
          memoryInGB: 1.5
      volumeMounts:
      - name: uptime-kuma
        mountPath: /app/data
  volumes:
  - secret:
      ssl.crt: <removed for this post>
      ssl.key: <removed for this post>
      nginx.conf: <removed for this post>
    name: nginx-config
  - name: uptime-kuma
    emptyDir: {}
  ipAddress:
    type: Private
    ports:
    - protocol: tcp
      port: 443
  osType: Linux
  restartPolicy: Always
  subnetIds:
   - id:  '/subscriptions/<removed for this post>/resourceGroups/Homelab/providers/Microsoft.Network/virtualNetworks/S2S_LAN/subnets'
     name: 'IPSEC_LAN'
tags: null
type: Microsoft.ContainerInstance/containerGroups

在subnetids.id零件上确实错误，我会收到以下错误：

(InvalidVirtualNetworkLocation) Container group 'uptime-kuma' is in location 'westeurope' while virtual network 'subscriptions/<removed for this post>/resourceGroups/Homelab/providers/Microsoft.Network/virtualNetworks' is in location '<null>'. The container group and virtual network should be in same location.
Code: InvalidVirtualNetworkLocation
Message: Container group 'uptime-kuma' is in location 'westeurope' while virtual network 'subscriptions/<removed for this post>/resourceGroups/Homelab/providers/Microsoft.Network/virtualNetworks' is in location '<null>'. The container group and virtual network should be in same location.

如您所见，它对属性网络说，该位置是因为虚拟的无法找到网络，因为“订阅 /”之前存在A /丢失。 当我添加另一个时，它将是：

subnetIds:
   - id:  '//subscriptions/<removed for this post>/resourceGroups/Homelab/providers/Microsoft.Network/virtualNetworks/S2S_LAN/subnets'

那么位置是正确的，可以找到它，但是我会发现权限错误的错误是因为它看到了：

The client '<removed for this post>' with object id '<removed for this post>' has permission to perform action 'Microsoft.ContainerInstance/containerGroups/write' on scope '/subscriptions/<removed for this post>/resourcegroups/Homelab/providers/Microsoft.ContainerInstance/containerGroups/uptime-kuma'; however, it does not have permission to perform action 'Microsoft.Network/virtualNetworks/subnets/join/action' on the linked scope(s) '//subscriptions/<removed for this post>/resourceGroups/Homelab/providers/Microsoft.Network/virtualNetworks/S2S_LAN/subnets' or the linked scope(s) are invalid.

我不知道如何解决此问题。 。我正在寻求帮助。

编辑：将其重建为二头肌模板后，我遇到了同样的问题。因此，它必须是组件的API版本，因此我尝试了不同的版本，所有的问题都相同。

Answer 1

在我的环境中进行测试时，您会面对确切的错误。

您需要分配 网络贡献者 在角色microsoft中构建。网络/virtualnetworks/subnets/join/action to to tocaned Identity。 -Access-control/custom-proles“ rel =“ nofollow noreferrer”> azure自定义角色为Azure中的资源提供粒状访问控制。我无法在环境中进行测试，因为我没有特权将角色分配给您需要管理特权的资源，以将这些角色分配给您的资源。

类似的问题也在 Microsoft Q＆amp; a 和MSFT也提出了同样的建议。