Skip to content

Commit 3aae4bc

Browse files
committed
Add troubleshooting steps
1 parent f2e552c commit 3aae4bc

File tree

1 file changed

+16
-47
lines changed

1 file changed

+16
-47
lines changed

src/content/docs/cloudflare-one/applications/casb/troubleshooting/troubleshoot-compute-accounts.mdx

Lines changed: 16 additions & 47 deletions
Original file line numberDiff line numberDiff line change
@@ -43,63 +43,32 @@ You may need to roll the Cloudflare API token used for your compute account if a
4343

4444
<Render file="api-roll-token" product="fundamentals" />
4545

46-
4. Copy or make note of your API token.
46+
4. Copy your API token.
4747

48-
Once you roll your API token in Cloudflare, you can update the API token value in your compute account's secrets manager:
48+
Once you roll your API token in Cloudflare, you can update the API token value in your secrets manager for [Amazon Web Services (AWS)](https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_update-secret-value.html) or [Google Cloud Platform (GCP)](https://cloud.google.com/secret-manager/docs/edit-secrets).
4949

50-
<Tabs> <TabItem label="Amazon Web Services (AWS)" >
51-
52-
1. In the AWS, open the [Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/asm_access.html).
53-
2. Choose **cloudflare-cds-secrets**.
54-
3. Select **Retrieve secret value**, then select **Edit**.
55-
4. Enter your Cloudflare API token.
56-
5. Select **Save**.
57-
58-
For more information, refer to the [AWS Secrets Manager documentation](https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_update-secret-value.html).
59-
60-
</TabItem>
61-
62-
<TabItem label="Google Cloud Platform (GCP)" >
50+
### Common token issues
6351

64-
1. In GCP, open the [Secret Manager](https://cloud.google.com/secret-manager/docs/overview).
65-
2. Choose your compute account connected to CASB.
66-
3. In **Actions**, select **Edit**.
67-
4. Choose your Cloudflare secret, then select **Edit secret**.
68-
5. Enter your Cloudflare API token.
69-
6. Select **Update secret**.
52+
#### `cloudflare-cds-secrets` does not exist in the compute account's secrets manager
7053

71-
For more information, refer to the [GCP Secret Manager documentation](https://cloud.google.com/secret-manager/docs/edit-secrets).
54+
To recreate the secret in your compute account:
7255

73-
</TabItem> </Tabs>
56+
1. Validate that you selected the correct region.
57+
2. [Upgrade the compute account](#upgrade-a-compute-account) to recreate the secret.
58+
3. [Update the secret value](#roll-api-tokens) in your compute account.
7459

75-
### Common token issues
60+
#### I no longer have access to the Cloudflare API token I created
7661

77-
#### cloudflare-cds-secrets does not exist in the secrets manager
62+
[Roll your Cloudflare API token](#roll-api-tokens) and add it to your compute account.
7863

79-
Validate that the correct region is selected
80-
Rerun Terraform Apply to recreate the secret
81-
Apply repeat the steps above to edit the secret's value
64+
To validate your compute account's API access:
8265

83-
#### I no longer have access to the API token I created
84-
85-
Following the above instructions, roll the API token again and add it to AWS or GCP Secrets Manager
86-
Validation: On the integration page, if the Compute Account is shown as "Healthy", the problem has been solved.
66+
1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **CASB** > **Integrations**.
67+
2. Choose the integration you created for cloud scanning.
68+
3. Select **Manage compute accounts**. If the status of the compute account integration is set to **Healthy**, the problem has been solved.
8769

8870
## Troubleshoot an unhealthy compute account
8971

90-
When a Compute Account becomes unhealthy, new scan configuration changes will not be put into use and new scan results will not appear in the dashboard.
91-
92-
The following steps should be used when a Compute Account is appearing with the "Unhealthy" badge within the CASB Integration page. Example:
93-
94-
Steps
95-
Rerun Terraform Apply
96-
Navigate to a directory that contains the Terraform state file created during previous Terraform activity for this Compute Account
97-
Pull the latest updates:
98-
terraform init --upgrade
99-
Recreate/Upgrade any missing resources:
100-
terraform apply
101-
After completion, review the health status of the Compute Account to verify recovery. If the Compute Account is now healthy, you can stop here. Else, continue to the next step.
72+
When CASB marks a compute account as **Unhealthy**, CASB will not use new scan configuration changes and new scan results will not appear in the dashboard.
10273

103-
Roll API Token
104-
Follow the steps listed in "Rotating API Tokens" section
105-
Review the health status of the Compute Account to verify recovery.
74+
To fix a compute account marked as **Unhealthy**, first [upgrade the compute account](#upgrade-a-compute-account). If the compute account is still unhealthy, [roll your API token](#roll-api-tokens).

0 commit comments

Comments
 (0)