smom-dbis-138/docs/operations/status-reports/ALL-38-ERRORS-LIST.md

All 38 Errors - Complete Detailed List

Log File: /tmp/terraform-apply-36regions-20251115-094717.log

Total Errors: 38

---

📊 Error Breakdown

Error Type	Count	Status
Subnet Service Endpoint	36	✅ FIXED
Log Analytics	1	✅ FIXED
Resource Group	1	⚠️ Normal
Total	38

---

1️⃣ Subnet Service Endpoint Errors (36)

Root Cause: Microsoft.ContainerService is NOT a valid service endpoint name. It should only be used in the delegation block, not in service_endpoints.

Error Message:

SubnetHasServiceEndpointWithInvalidServiceName: Subnet ... has an item in ServiceEndpoints array 
with invalid service name 'Microsoft.ContainerService'. Supported service names are: 
Microsoft.Storage, Microsoft.Sql, Microsoft.AzureActiveDirectory, Microsoft.AzureCosmosDB, 
Microsoft.Web, Microsoft.NetworkServiceEndpointTest, Microsoft.KeyVault, Microsoft.EventHub, 
Microsoft.ServiceBus, Microsoft.ContainerRegistry, Microsoft.CognitiveServices, Microsoft.Storage.Global

Fix Applied: ✅ Removed Microsoft.ContainerService from service_endpoints array in modules/region/main.tf

Affected Regions (36):

1. australiaeast - azurerm_subnet.aks (Line 1368) - updating
2. australiasoutheast - azurerm_subnet.aks (Line 1214) - updating
3. austriaeast - azurerm_subnet.aks (Line 1357) - creating
4. belgiumcentral - azurerm_subnet.aks (Line 1302) - updating
5. brazilsouth - azurerm_subnet.aks (Line 1016) - creating
6. canadacentral - azurerm_subnet.aks (Line 1291) - updating
7. canadaeast - azurerm_subnet.aks (Line 1148) - creating
8. centralindia - azurerm_subnet.aks (Line 1203) - updating
9. chilecentral - azurerm_subnet.aks (Line 1049) - updating
10. eastasia - azurerm_subnet.aks (Line 1137) - creating
11. francecentral - azurerm_subnet.aks (Line 1379) - updating
12. germanywestcentral - azurerm_subnet.aks (Line 1247) - updating
13. indonesiacentral - azurerm_subnet.aks (Line 1159) - updating
14. israelcentral - azurerm_subnet.aks (Line 1390) - updating
15. italynorth - azurerm_subnet.aks (Line 1082) - creating
16. japaneast - azurerm_subnet.aks (Line 1346) - updating
17. japanwest - azurerm_subnet.aks (Line 1192) - updating
18. koreacentral - azurerm_subnet.aks (Line 1269) - updating
19. koreasouth - azurerm_subnet.aks (Line 1170) - creating
20. malaysiawest - azurerm_subnet.aks (Line 1038) - creating
21. mexicocentral - azurerm_subnet.aks (Line 1005) - updating
22. mexicocentral - azurerm_subnet.aks (Line 1016) - creating (duplicate)
23. newzealandnorth - azurerm_subnet.aks (Line 1093) - updating
24. northeurope - azurerm_subnet.aks (Line 1324) - updating
25. norwayeast - azurerm_subnet.aks (Line 1258) - updating
26. polandcentral - azurerm_subnet.aks (Line 1313) - updating
27. qatarcentral - azurerm_subnet.aks (Line 1181) - updating
28. southafricanorth - azurerm_subnet.aks (Line 1071) - updating
29. southeastasia - azurerm_subnet.aks (Line 1115) - creating
30. spaincentral - azurerm_subnet.aks (Line 1236) - updating
31. swedencentral - azurerm_subnet.aks (Line 1060) - updating
32. switzerlandnorth - azurerm_subnet.aks (Line 1335) - updating
33. uaenorth - azurerm_subnet.aks (Line 1027) - creating
34. uksouth - azurerm_subnet.aks (Line 1104) - updating
35. ukwest - azurerm_subnet.aks (Line 1225) - updating
36. westeurope - azurerm_subnet.aks (Line 1280) - updating (admin region)
37. westeurope - azurerm_subnet.aks (Line 1291) - updating (admin region, duplicate)
38. westindia - azurerm_subnet.aks (Line 1126) - updating

Note: Some regions appear twice (mexicocentral, westeurope) due to multiple subnet operations.

---

2️⃣ Log Analytics Errors (1)

Error #1: austriaeast - azurerm_log_analytics_workspace (Line 1401)

Error Message:

LocationNotAvailableForResourceType: The provided location 'austriaeast' is not available 
for resource type 'Microsoft.OperationalInsights/workspaces'

Fix Applied: ✅ Added austriaeast to log_analytics_location mapping in modules/region/main.tf

• Now uses westeurope for Log Analytics (same as belgiumcentral and westindia)

---

3️⃣ Resource Group Errors (1)

Error #1: westeurope - azurerm_resource_group (Line 966)

Error Message:

Error: deleting Resource Group "az-p-we-rg-comp-001": the Resource Group still contains Resources.

Status: ⚠️ Normal Behavior

• Cannot delete a Resource Group that still contains resources
• No fix needed - resources should be deleted first, then the RG

---

🔧 Fixes Applied

1. ✅ Log Analytics Error (austriaeast)

File: terraform/well-architected/cloud-sovereignty/modules/region/main.tf

Change:

# Before
log_analytics_location = contains([
  "belgiumcentral", "westindia"
], var.region_name) ? "westeurope" : var.region_name

# After
log_analytics_location = contains([
  "belgiumcentral", "westindia", "austriaeast"
], var.region_name) ? "westeurope" : var.region_name

Status: ✅ Fixed

---

2. ✅ Subnet Service Endpoint Errors (36)

File: terraform/well-architected/cloud-sovereignty/modules/region/main.tf

Change:

# Before
service_endpoints = ["Microsoft.ContainerService", "Microsoft.Storage", "Microsoft.KeyVault"]

# After
# Note: Microsoft.ContainerService is NOT a valid service endpoint - it's used in delegation only
# Valid service endpoints: Storage, KeyVault (ContainerService is in delegation block above)
service_endpoints = ["Microsoft.Storage", "Microsoft.KeyVault"]

Status: ✅ Fixed

Note: Microsoft.ContainerService/managedClusters is correctly configured in the delegation block above, which is what AKS requires. Service endpoints are separate and used for direct service connectivity (Storage, KeyVault, etc.).

---

3. ⚠️ Resource Group Error (1)

Status: No fix needed - Normal behavior when attempting to delete a Resource Group with resources.

---

📋 Summary by Region

Regions with Subnet Errors (36):

• australiaeast, australiasoutheast, austriaeast
• belgiumcentral, brazilsouth
• canadacentral, canadaeast, centralindia, chilecentral
• eastasia
• francecentral, germanywestcentral
• indonesiacentral, israelcentral, italynorth
• japaneast, japanwest
• koreacentral, koreasouth
• malaysiawest, mexicocentral (2 errors)
• newzealandnorth, northeurope, norwayeast
• polandcentral, qatarcentral
• southafricanorth, southeastasia, spaincentral
• swedencentral, switzerlandnorth
• uaenorth, uksouth, ukwest
• westeurope (2 errors), westindia

Regions with Log Analytics Errors (1):

• austriaeast (✅ Fixed)

Regions with Resource Group Errors (1):

• westeurope (⚠️ Normal behavior)

---

✅ All Fixes Applied

1. ✅ Log Analytics error fixed (austriaeast uses westeurope)
2. ✅ Subnet service endpoint errors fixed (removed Microsoft.ContainerService from service_endpoints)
3. ⚠️ Resource Group error: No action needed (normal behavior)

---

🚀 Next Steps

After fixes:

1. Re-run Terraform apply:

   cd terraform/well-architected/cloud-sovereignty
   terraform apply -parallelism=128 -auto-approve
   

2. Monitor deployment:

   ./scripts/deployment/monitor-36-region-deployment.sh
   

---

Status: ✅ All critical errors fixed, ready for re-deployment