google-cloud-platform - 同时发生了政策变化。请使用指数退避重试整个读取-修改-写入

Question

发布方法网址

https://cloudresourcemanager.googleapis.com/v1/projects/project-name:setIamPolicy

要求:

{
    "resource": "projects/project-name",
    "policy": {
        "bindings": [
            {
                "role": "roles/resourcemanager.organizationAdmin",
                "members": [
                    "user:test12345678@domain.com"
                ]
            }
         ],
        "etag": "BwWWja0YfJA=",
        "version": 3
     }
}

响应:

{

"error": { "code": 409, "message": "There were concurrent policy changes. Please retry the whole read-modify-write with exponential backoff.", "status": "ABORTED" }

}

Answer 1

文档建议使用读取-修改-写入模式来更新资源策略。

Reading the current policy by calling getIamPolicy().Editing the returned policy, either by using a text editor or programmatically, to add or remove any desired members and their role grants.Writing the updated policy by calling setIamPolicy().

在您的情况下，您尝试设置的策略和资源上当前处于事件状态的策略似乎有所不同。发生这种情况的一种方式是，如果您这样做了:

1. getIamPolicy() > policy.json
2. addIamPolicyBinding() 或 removeIamPolicyBinding()
3. setIamPolicy() 策略.json

#2 之后资源上的策略版本与#3 尝试设置的内容不同步，因此抛出异常。要确认您可以将您尝试设置的策略中的 etag 字段与当前资源上的 etag 进行比较。应该有不匹配。