Creating address "web-server-ip" failed

[RossJ]

Creating address "web-server-ip" failed. Error: Constraint constraints/compute.vmExternalIpAccess violated for project 863503911154. Add instance projects/your-zones/zones/europe-west2-c/instances/instance-1 to the constraint to use external IP with it.

Can anyone help me with the above constraint error?

[Marvin_Lucero]

Hi @RossJ ,

Based from the error that you're getting, there is an organization policy constraint rule applied, as per documentation. Your organization policy administrator must have set it initially. He/she must allow lists of VM instances to use external IP addresses. For more information on how to fix this, follow this documentation or guide.

Let me know if this helps.

[RossJ]

Dear Marvin_Lucerno,

Thanks for your reply.

I am the site owner, and thought I was putting together very bland
organisation policies. Certainly I would not know how to implement the
constraint mentioned. We are analysing GCP for a roll-out at the moment and
I am the only one with access to the site.

Is there anything else I could look at?

--
Kind Regards,

Ross James
CEO
Agri-Thrive Global Ltd

[RossJ]

As yet I have not received a solution to the problem

[alexmoore]

As per the other response, typically the only thing that can cause this error is an org policy constraint that limits external IPs.  You would need to disable that constraint or add the instance name to the policy. 

What settings do you have on the policy? you can see them here:

https://console.cloud.google.com/iam-admin/orgpolicies/compute-vmExternalIpAccess