fortinet / fortigate-tutorial-gcp

6 stars 12 forks source link

PR: Add documentation around 5 VPC default quota limit - ask for 10 before running day1 terraform #9

Open obriensystems opened 4 months ago

obriensystems commented 4 months ago

This happens to all projects that ask for more than 4 more VPCs - quota must be pre-approved running day1 terraform apply

michael@cloudshell:~/fortigate-terraform-olapp/fortigate-tutorial-gcp/terraform/day1 (fortigate-terraform-olapp)$ terraform apply --parallelism=1 tf.plan
╷
│ Error: Error waiting to create Network: Error waiting for Creating Network: Quota 'NETWORKS' exceeded.  Limit: 5.0 globally.
│       metric name = compute.googleapis.com/networks
│       limit name = NETWORKS-per-project
│       limit = 5
│       dimensions = map[global:global]
│ 
│ 
│   with google_compute_network.tier1,
│   on workloads.tf line 6, in resource "google_compute_network" "tier1":
│    6: resource "google_compute_network" "tier1" {
│ 
Screenshot 2024-03-03 at 19 22 01 Screenshot 2024-03-03 at 19 22 53
Thank you for submitting Case # (ID:19e7ad152b654b908c) to Google Cloud Platform support for the following quota:
Change Networks from 5 to 10

1 min
Your quota request for fortigate-terraform-olapp has been approved and your project quota has been adjusted according to the following requested limits:

+----------+------------+--------+-----------------+----------------+
| NAME     | DIMENSIONS | REGION | REQUESTED LIMIT | APPROVED LIMIT |
+----------+------------+--------+-----------------+----------------+
| NETWORKS |            | GLOBAL |              10 |             10 |
+----------+------------+--------+-----------------+----------------+

After approval, Quotas can take up to 15 min to be fully visible in the Cloud Console and available to you.
Screenshot 2024-03-03 at 19 24 41

rerun

michael@cloudshell:~/fortigate-terraform-olapp/fortigate-tutorial-gcp/terraform/day1 (fortigate-terraform-olapp)$ terraform plan -out tf.plan
Plan: 27 to add, 0 to change, 0 to destroy.

1928
michael@cloudshell:~/fortigate-terraform-olapp/fortigate-tutorial-gcp/terraform/day1 (fortigate-terraform-olapp)$ terraform apply --parallelism=1 tf.plan
google_compute_network.tier1: Creating...
google_compute_network.tier1: Still creating... [10s elapsed]
google_compute_network.tier1: Still creating... [20s elapsed]
google_compute_network.tier1: Still creating... [30s elapsed]
google_compute_network.tier1: Creation complete after 33s [id=projects/fortigate-terraform-olapp/global/networks/fgt-wrkld-vpc-tier1]
google_compute_network.tier2: Creating...
google_compute_network.tier2: Still creating... [10s elapsed]
google_compute_network.tier2: Still creating... [20s elapsed]
google_compute_network.tier2: Creation complete after 23s [id=projects/fortigate-terraform-olapp/global/networks/fgt-wrkld-vpc-tier2]
google_compute_firewall.tier1: Creating...
google_compute_firewall.tier1: Still creating... [10s elapsed]
google_compute_firewall.tier1: Creation complete after 12s [id=projects/fortigate-terraform-olapp/global/firewalls/fgt-wrkld-fw-tier1-allowall]
google_compute_subnetwork.tier1: Creating...
google_compute_subnetwork.tier1: Still creating... [10s elapsed]
google_compute_subnetwork.tier1: Creation complete after 12s [id=projects/fortigate-terraform-olapp/regions/northamerica-northeast1/subnetworks/fgt-wrkld-sb-tier1]
google_compute_subnetwork.tier2: Creating...
google_compute_subnetwork.tier2: Still creating... [10s elapsed]
oogle_compute_subnetwork.tier2: Still creating... [20s elapsed]
google_compute_subnetwork.tier2: Creation complete after 22s [id=projects/fortigate-terraform-olapp/regions/northamerica-northeast1/subnetworks/fgt-wrkld-sb-tier2]
google_compute_firewall.tier2: Creating...
google_compute_firewall.tier2: Still creating... [10s elapsed]
google_compute_firewall.tier2: Creation complete after 12s [id=projects/fortigate-terraform-olapp/global/firewalls/fgt-wrkld-fw-tier2-allowall]
google_compute_address.wrkld_tier1: Creating...
google_compute_address.wrkld_tier1: Still creating... [10s elapsed]
google_compute_address.wrkld_tier1: Creation complete after 11s [id=projects/fortigate-terraform-olapp/regions/northamerica-northeast1/addresses/fgt-ip-wrkld-tier1]
module.peer1.google_compute_network_peering.hub_to_spoke: Creating...
module.peer1.google_compute_network_peering.hub_to_spoke: Still creating... [10s elapsed]
module.peer1.google_compute_network_peering.hub_to_spoke: Creation complete after 11s [id=fgt-vpc-internal/peer-fgthub-to-fgt-wrkld-vpc-tier1-fortigate-terraform-olapp]
google_compute_address.wrkld_tier2: Creating...
google_compute_address.wrkld_tier2: Still creating... [10s elapsed]
google_compute_address.wrkld_tier2: Creation complete after 11s [id=projects/fortigate-terraform-olapp/regions/northamerica-northeast1/addresses/fgt-ip-wrkld-tier2]
module.peer1.google_compute_network_peering.spoke_to_hub: Creating...
1930
module.peer1.google_compute_network_peering.spoke_to_hub: Still creating... [10s elapsed]
module.peer1.google_compute_network_peering.spoke_to_hub: Still creating... [20s elapsed]
module.peer1.google_compute_network_peering.spoke_to_hub: Creation complete after 22s [id=fgt-wrkld-vpc-tier1/peer-fgt-wrkld-vpc-tier1-fortigate-terraform-olapp-to-fgthub]
module.inbound.data.fortios_system_proberesponse.probe: Reading...
module.inbound.data.fortios_system_proberesponse.probe: Read complete after 0s [id=SystemProbeResponse]
module.inbound.data.fortios_system_interface.probe: Reading...
module.inbound.data.fortios_system_interface.probe: Read complete after 0s [id=probe]
module.peer2.data.google_compute_subnetwork.hub: Reading...
module.peer2.data.google_compute_subnetwork.hub: Read complete after 0s [id=projects/fortigate-terraform-olapp/regions/northamerica-northeast1/subnetworks/fgt-sb-internal]
module.inbound.google_compute_route.default_route: Creating...
module.inbound.google_compute_route.default_route: Still creating... [10s elapsed]
module.inbound.google_compute_route.default_route: Still creating... [20s elapsed]
module.inbound.google_compute_route.default_route: Creation complete after 22s [id=projects/fortigate-terraform-olapp/global/routes/fgt-rt-default-via-fgt]
module.inbound.fortios_firewallservice_custom.service[0]: Creating...
module.inbound.fortios_firewallservice_custom.service[0]: Creation complete after 0s [id=serv1-tcp8080]
module.inbound.fortios_firewallservice_custom.service_probe: Creating...
module.inbound.fortios_firewallservice_custom.service_probe: Creation complete after 1s [id=LB_Probe]
module.inbound.google_compute_region_backend_service.elb_bes: Creating...
module.inbound.google_compute_region_backend_service.elb_bes: Still creating... [10s elapsed]
module.inbound.google_compute_region_backend_service.elb_bes: Still creating... [20s elapsed]
module.inbound.google_compute_region_backend_service.elb_bes: Creation complete after 21s [id=projects/fortigate-terraform-olapp/regions/northamerica-northeast1/backendServices/fgt-bes-elb-na-northeast1]
module.inbound.google_compute_address.elb_eip: Creating...
1932
module.inbound.google_compute_address.elb_eip: Still creating... [10s elapsed]
module.inbound.google_compute_address.elb_eip: Creation complete after 11s [id=projects/fortigate-terraform-olapp/regions/northamerica-northeast1/addresses/serv1-eip-na-northeast1]
module.peer2.fortios_router_static.to_spoke_subnets["10.1.0.0/16"]: Creating...
module.peer2.fortios_router_static.to_spoke_subnets["10.1.0.0/16"]: Creation complete after 1s [id=6]
module.peer2.google_compute_network_peering.hub_to_spoke: Creating...
module.peer2.google_compute_network_peering.hub_to_spoke: Still creating... [10s elapsed]
module.peer2.google_compute_network_peering.hub_to_spoke: Creation complete after 11s [id=fgt-vpc-internal/peer-fgthub-to-fgt-wrkld-vpc-tier2-fortigate-terraform-olapp]
module.inbound.fortios_firewall_vip.vip[0]: Creating...
module.inbound.fortios_firewall_vip.vip[0]: Creation complete after 0s [id=serv1-tcp80]
module.inbound.google_compute_forwarding_rule.elb_frule: Creating...
module.inbound.google_compute_forwarding_rule.elb_frule: Still creating... [10s elapsed]
module.inbound.google_compute_forwarding_rule.elb_frule: Still creating... [20s elapsed]
module.inbound.google_compute_forwarding_rule.elb_frule: Creation complete after 21s [id=projects/fortigate-terraform-olapp/regions/northamerica-northeast1/forwardingRules/serv1-fwdrule]
module.inbound.fortios_firewall_vip.vip_probe: Creating...
module.inbound.fortios_firewall_vip.vip_probe: Creation complete after 0s [id=serv1-probe]
module.peer2.google_compute_network_peering.spoke_to_hub: Creating...
module.peer2.google_compute_network_peering.spoke_to_hub: Still creating... [10s elapsed]
module.peer2.google_compute_network_peering.spoke_to_hub: Still creating... [20s elapsed]
module.peer2.google_compute_network_peering.spoke_to_hub: Creation complete after 21s [id=fgt-wrkld-vpc-tier2/peer-fgt-wrkld-vpc-tier2-fortigate-terraform-olapp-to-fgthub]
module.inbound.fortios_firewall_policy.vip_allow[0]: Creating...
module.inbound.fortios_firewall_policy.vip_allow[0]: Creation complete after 0s [id=2]
module.inbound.fortios_firewall_policy.probe_allow: Creating...
module.inbound.fortios_firewall_policy.probe_allow: Creation complete after 1s [id=3]
module.outbound.data.google_compute_forwarding_rule.elb: Reading...
module.outbound.data.google_compute_forwarding_rule.elb: Read complete after 0s [id=projects/fortigate-terraform-olapp/regions/northamerica-northeast1/forwardingRules/serv1-fwdrule]
module.outbound.fortios_firewall_ippool.this: Creating...
module.outbound.fortios_firewall_ippool.this: Creation complete after 0s [id=gcp-serv1-eip]
module.outbound.fortios_firewall_policy.allowout: Creating...
module.outbound.fortios_firewall_policy.allowout: Creation complete after 1s [id=4]
google_compute_instance.wrkld_websrv: Creating...
google_compute_instance.wrkld_websrv: Still creating... [10s elapsed]
google_compute_instance.wrkld_websrv: Creation complete after 12s [id=projects/fortigate-terraform-olapp/zones/northamerica-northeast1-a/instances/fgt-wrkld-tier2-websrv]
google_compute_instance.wrkld_proxy: Creating...
google_compute_instance.wrkld_proxy: Still creating... [10s elapsed]
google_compute_instance.wrkld_proxy: Creation complete after 13s [id=projects/fortigate-terraform-olapp/zones/northamerica-northeast1-a/instances/fgt-wrkld-tier1-proxy]

Apply complete! Resources: 27 added, 0 changed, 0 destroyed.

Outputs:

public_ip = "34.118.190.20"