OCI跨租户LPG本地VCN对等连接策略创建失败求助

错误原因 #

你遇到的unable to parse Define compartment acceptorComp as id ocid1.compartment.oc1..aaa错误，核心原因是OCI策略的Define compartment语句中，不需要添加id关键字。OCI策略语法规定，定义compartment时直接指定其OCID即可，多余的id会触发解析失败。

修正后的策略配置 #

请求方租户策略 #

Define tenancy Requestor as ocid1.tenancy.oc1..qqq
Define group requestorGrp as ocid1.group.oc1..www
Define compartment acceptorComp as ocid1.compartment.oc1..aaa

Admit group requestorGrp of tenancy Requestor to manage local-peering-to in compartment acceptorComp
Admit group requestorGrp of tenancy Requestor to associate local-peering-gateways in tenancy Requestor with local-peering-gateways in compartment acceptorComp

接受方租户策略（对应修正） #

接受方需同步修正compartment定义语句，去掉id关键字：

Define tenancy Acceptor as ocid1.tenancy.oc1..xxx
Define group acceptorGrp as ocid1.group.oc1..yyy
Define compartment requestorComp as ocid1.compartment.oc1..zzz

Admit group acceptorGrp of tenancy Acceptor to manage local-peering-to in compartment requestorComp
Admit group acceptorGrp of tenancy Acceptor to associate local-peering-gateways in tenancy Acceptor with local-peering-gateways in compartment requestorComp

关键语法规则 #

OCI策略Define语句的标准格式：

• 定义租户：Define tenancy <别名> as <租户OCID>
• 定义组：Define group <别名> as <组OCID>
• 定义compartment：Define compartment <别名> as <compartment OCID>
  所有类型的定义均无需额外id前缀，直接使用对应资源的OCID即可。

内容的提问来源于stack exchange，提问作者parnavh