存储帐户阻止容器创建的网络规则 [英] Network Rules of storage account blocking container creation

问题描述

按照有关 Azure CLI的说明进行操作创建blob的快速入门" .

默认存储帐户中的某些内容似乎阻止了创建新容器的功能；但是，"defaultAction" 是 Allow :

It looks like something in the default storage account is blocking the ability to create new containers; yet, the "defaultAction" is Allow:

以下Azure CLI:

The following Azure CLI:

az storage container create --account-name meaningfulname --name nancy --auth-mode login

...导致错误，解释原因可能是存储帐户的网络规则:

... results in the error explaining the network rules of the Storage Account might be the cause:

The request may be blocked by network rules of storage account. Please check network rule set using 'az storage account show -n accountname --query networkRuleSet'.
If you want to change the default action to apply when no rule matches, please use 'az storage account update'.

使用上述消息中的建议，帐户名称上的显示"命令将给出:

Using the suggestion from the above message, the "show" command on the account-name gives:

> az storage account show -n meaningfulname --query networkRuleSet
{
  "bypass": "AzureServices",
  "defaultAction": "Allow",
  "ipRules": [],
  "virtualNetworkRules": []
}

我认为Azure CLI将属于可以绕过并执行操作的服务".而且，在我看来，默认操作是相当宽松的.

I would think that the Azure CLI would be among the "services" that could bypass and do operations. And, the default action would seem to me to be quite permissive.

我已经完成了根据错误消息和命令(以及变体)进行搜索的工作.我不知道Azure CLI的怪异之处似乎没有很多，所以也许这是如此明显，以至于人们还没有写下任何东西.我不认为我要复制

I've done to searching around by the error messages and commands (and variations). There does not appear to be much on what I don't know the quirks of the Azure CLI, so maybe this is so obvious that people haven't written anything up. I don't think I'm duplicating

推荐答案

不确定这是否有帮助...

Not sure if this would be helpful ...

如果您更新防火墙和虚拟网络"，则部分，并使用CLI使其可用于所有网络，这需要一些时间才能生效.我观察到，生效大约需要10 -30秒.

If you update the "Firewalls and virtual networks" section of the Storage account and make it accessible for all networks , using CLI , it takes sometime to take effect. I have observed that it takes around 10 -30 seconds to take effect.

尝试等待30秒，然后尝试az容器create语句.应该可以.

Try waiting for 30 seconds and then try the az container create statement. It should work.

这篇关于存储帐户阻止容器创建的网络规则的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！