Tag errors

Causes and remedies for the error codes of tag categories, tags and tag assignments.

`error.tag.not_associable`

Text in the console: Tags of category {category} cannot be attached to a {kind}.
Meaning for API clients: Tags of the category cannot be attached to objects of that kind (the category's associable kinds).
Code: INVALID_ARGUMENT, HTTP 400

Argument	What it holds
`category`	the name of the category.
`kind`	the kind of the object, for example `host`.

Cause. The category of the tag lists the kinds of objects its tags may be attached to, and the object is of another kind.

Remedy.

Attach a tag of a category that allows the kind, or
Add the kind to the category: kyvernon inventory tag-categories update <id> --kind <kind> --kind <kind>, listing the current kinds and the new one.

`error.tag.cardinality`

Text in the console: Object {object} already carries a tag of category {category}, which allows one tag per object.
Meaning for API clients: The object already carries another tag of a category that allows one tag per object.
Code: FAILED_PRECONDITION, HTTP 412

Argument	What it holds
`category`	the name of the category.
`object`	the id of the object.

Cause. The category allows one tag per object (cardinality single), and the object already carries another tag of it.

Remedy.

Detach the other tag first: kyvernon inventory tags detach <tag> <object>.
Or allow several tags per object: kyvernon inventory tag-categories update <id> --cardinality multiple.

`error.tag.provider_managed`

Text in the console: Tags of category {category} are attached and detached by the provider only.
Meaning for API clients: Tags of a provider-managed category are attached and detached by the provider only.
Code: PERMISSION_DENIED, HTTP 403

Argument	What it holds
`category`	the name of the category.

Cause. Tags of a provider-managed category decide which provider firewall groups an object is in. Only the provider attaches and detaches them; a tenant user cannot.

Remedy.

Ask the provider to attach or detach the tag.
For labels of its own, a tenant uses a category that is not provider-managed.

`error.tag.category_change`

Text in the console: The category value {field} cannot change this way: cardinality goes from single to multiple only, and associable kinds can only be added.
Meaning for API clients: A category's cardinality changes from single to multiple only, and associable kinds can only be added.
Code: INVALID_ARGUMENT, HTTP 400

Argument	What it holds
`field`	the request field, `cardinality` or `associableKinds`.

Cause. A change of a category would make existing assignments invalid. The cardinality changes from single to multiple only, and associable kinds can only be added, never removed.

Remedy.

Keep the current kinds in the list and add the new ones.
To narrow a category, create a new category with the narrower rules, attach its tags, and delete the old category: kyvernon inventory tag-categories delete <id>.