How to debug a 409 from the TRE CLI?

[TonyWildish-BH]

I'm trying to automate creating some shared services etc with the CLI, and getting a 409 return code with no error message. How can I debug this and find out what the problem is?

Steps to reproduce

My specific example is a certificate service for Nexus. I have a JSON file, as follows:

{
  "templateName": "tre-shared-service-certs",
  "properties": {
    "display_name": "nexus-ssl certificate service",
    "description": "automated deployment",
    "cert_name": "nexus-ssl",
    "domain_prefix": "nexus"
  }
}

I run the CLI:

tre shared-services new --definition-file my-definition.json

and I get this response:

Creating shared_service...
{
  "status_code": 409,
  "body": ""
}

what can I do to debug this?

This is using the latest version of the CLI, installed just a few minutes ago.

N.B. Other commands work fine, creating workspaces etc, so my basic installation is good and I'm logged in to the TRE.

[tim-p-allen]

Hey @TonyWildish-BH a 409 error for that command is version exists

AzureTRE/api_app/api/routes/shared_service_templates.py

Line 39 in 9c59b80

raise HTTPException(status_code=status.HTTP_409_CONFLICT, detail=strings.SHARED_SERVICE_TEMPLATE_VERSION_EXISTS)

Agreed logging could be better.
Also doesnt look like you have enough fields in your json file

[TonyWildish-BH]

hi @tim-allen-ck. I'm not trying to register a shared service, I'm trying to deploy one from an existing template.

Can you tell me what fields are missing? I'm trawling the code to find out what should be in there.

[tim-p-allen]

My mistake. This line then:

AzureTRE/api_app/api/routes/shared_services.py

Lines 62 to 63 in 9c59b80

	logger.exception("Shared service already exists")
	raise HTTPException(status_code=status.HTTP_409_CONFLICT, detail=str(e))

template_schema.json

{
  "$schema": "http://json-schema.org/draft-07/schema",
  "$id": "./templates/shared_services/service_name/template_schema.json",
  "type": "object",
  "title": "New Shared Service",
  "description": "A shared service",
  "properties": {},
  "required": []
}

[TonyWildish-BH]

For the cert service I see

  "required": [
    "domain_prefix",
    "cert_name"
  ],

and I have both those, so that should be OK. Any idea what else could be causing my 409?

[marrobi]

Are you trying to deploy multiple instances of the same shared service? Shared services are limited to one instance.

See #3997 and #2820 as a potential resolution.

[TonyWildish-BH]

No, I'm deploying into an empty TRE, there's no other CERT service anywhere.

[marrobi]

Definitely nothing in the Cosmos DB? You will have to look at the API logs to get more details https://microsoft.github.io/AzureTRE/v0.19.0/troubleshooting-faq/app-insights-logs/

[TonyWildish-BH]

this was with a virgin TRE, I deployed from scratch (with a new TRE_ID) explicitly to have a clean environment.

[marrobi]

Can you see anything in the logs?

[TonyWildish-BH]

no, nothing in the logs...