Issues deploying SAP Data Intelligence (DI) on Azure

Sap User 1 Reputation point
2021-01-15T10:40:13.69+00:00

Hello All,

To set the context, SAP provides an interface called client appliance library that takes the subscription id of Azure and automatically creates the infra(VMs, Kubernetes cluster etc.) on Azure and deploys the SAP Data Intelligence framework. However while we try to deploy it, the deployment fails and we see the following error in the appliance log of SAP. I'd be grateful if someone can confirm what the problem might be. Specifically, do you think it could be an issue with the network security group config on Azure or an issue with AKS ?

Error: sapdataintelligence305.azurecr.io/com.sap.datahub.linuxx86_64/vora-dqp-textanalysis:3.0.56" Pulling image: sapdataintelligence305.azurecr.io/com.sap.datahub.linuxx86_64/vora-dqp-textanalysis:3.0.56 Error response from daemon: Get https://sapdataintellige nce305.azurecr.io/v2/: dial tcp: lookup sapdataintelligence305.azurecr.io on [::1]:53: read udp [::1]:46965->[::1]:53: read: connection refused

Thank you!

SAP HANA on Azure Large Instances
SAP HANA on Azure Large Instances
Microsoft branding terminology for an Azure offer to run HANA instances on SAP HANA hardware deployed in Large Instance stamps in different Azure regions.
120 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. TravisCragg-MSFT 5,681 Reputation points Microsoft Employee
    2021-01-16T00:04:59.957+00:00

    From this error, we know that the DNS resolution for the container is succeeding, and the issue is in the connection to it. Typically this error can be from an issue blocking the connection (like NSGs or firewall), an issue with the given authentication to the container registry, or an issue with the daemon.

    Issues with the daemon can occur, and usually wont be reproducible, so redeploying the entire infra will usually resolve it.

    An issue with the authentication or blocking connection will be reproducible. If you are deploying this into an existing VNET, make sure that the subnet can reach the public internet, or can reach outbound to 'https://sapdataintellige nce305.azurecr.io'.

    If you are deploying this into an existing VNET and have verified the outbound connectivity, and tried to redeploy the SAP infra, I would reach out to SAP and see if there are any known limitations / prerequisites for the deployment.

    If that does not work, your next best bet will be Azure Support to try and investigate the specific cause of failure.

    0 comments
  2. Marchenko, Evgenii 1 Reputation point
    2021-02-23T13:57:01.12+00:00

    Please check prerequisites for SAP Data Intelligence.
    The subscription needs to fulfill one of the following requirements:
    • You are an administrator on the subscription, i.e. your user has the role "Owner" and has access to scope /subscriptions/<your subscription ID>.
    • Your Microsoft Azure user has been assigned the role "User Access Administrator" and has access to scope /subscriptions/<your subscription ID>.
    When you connect from SAP Cloud Appliance Library to Microsoft Azure, you need to use the authorization type Extended
    Authorization for Kubernetes Cluster.

    Hope it helps.

    0 comments