RANGES_EXHAUSTEDindicates that the range of IP addresses that you initially
requested could not be accommodated and that you must request a new range. You initially
created a range request inStep 2: Set up networking.
To request a new range from which Apigee chooses an IP address for the private service connections execute the followinggcloudcommand:
gcloud compute addresses create$RANGE_NAME_2--project=$PROJECT_ID--global --prefix-length=16
--description="additional peering range for Google services" --network=$NETWORK_NAME--purpose=VPC_PEERING
This command creates a new range named$RANGE_NAME_2.
Verify the details of both the old and new address range
gcloud compute addresses list --global --project=$PROJECT_ID
gcloud services vpc-peerings list \
--network=$NETWORK_NAME\
--service=servicenetworking.googleapis.com \
--project=$PROJECT_ID
Creating an Apigee organization
The following example shows a common error that Apigee might display when you first try to create
an organization:
Apigee API (staging) has not been used in project 59387731598 before or it is disabled.
Enable it by visiting https://console.developers.google.com/apis/api/staging-apigee.sandbox.googleapis.com/overview?project=59387731598 then retry.
If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.
This means that one or more of the required APIs is not enabled. Review the APIs listed inStep 1: Enable required APIsand be sure that all APIs are enabled before you continue.
In addition, you might get one of the following HTTP errors:
401 (UNAUTHENTICATED)indicates that your credentials may have timed
out. Try renewing your authorization token, as the following example shows:
404 (Not Found)can be the result of the following:
You entered the wrong endpoint/request URL. Check that you specifiedapigee.googleapis.comfor the API call's domain.
Your project might not yet be provisioned. ContactApigee Sales.
409 (Conflict)usually indicates that the given organization name
already exists. Organization names must be globally unique. Choose another name for the
organization and re-issue the command. (You specify the name in the payload of the
request if you are creating an organization on the command line. Keep in mind that you must
create an organization that has the same name as your project, so this really shouldn't
happen unless there's a typo.)
The following is a possible error that Apigee might return when you check the status of a new
organization request:
403 (Permission Denied)could indicate that the organization has not yet been
created. Wait another minute and try again. If Apigee returns a403when you first
try to create the new organization, it could mean that one or more of your APIs have not been
enabled. Be sure that you enabled all the APIs as described inStep 1: Enable required APIs.
Deploying samples
Load balancer not healthy
When deploying a sample proxy, Apigee might return a502 (Bad Gateway)HTTP error.
In this case, try the following:
Check the health of the Load Balancer. The Load balancer tab shows all load
balancers for the project and their statuses. A yellow triangle indicates
that the load balancer backend service is not healthy.
In the Google Cloud console, go to theNetwork services>Load balancingpage.
After confirming an issue with the load balancer, check the VMs in your runtime instance
to ensure that they are up and healthy.
Look at the log files to see if you can find an error or other type of issue that might have
lead to a problem. For more information on enabling and viewing logs, seeViewing logs.
Try doing a rolling restart on the instance group in Cloud console:
In the Google Cloud console, go to theCompute Engine>Instance groupspage.
From the list of instance groups, click the one that is not responding in theNamecolumn.
ClickRolling Restart/Replace.
On the next screen, clickRestart.
This restarts the Envoy instance.
Incorrect instance IP
If at any time you delete and recreate your Apigee instance,
the Apigee instance IP changes and can become out of sync with the managed instance group (MIG)
template's endpoint IP. For example, the MIG template will still have the old IP from the
deleted instance. The MIG template was created during the Apigeeprovisioning process. In this situation, try the following steps to update the MIG template with
the correct Apigee IP:
In the Google Cloud console, go to theApigee>Admin>Instancespage.
Open the instance template. You need to open the instance template that is used by the
backend that is mapped to your load balancer.
Scroll down to find theENDPOINTIP under theCustom metadatasection.
If the endpoint IP differs from the one you noted in the Apigee UI, you must change the
Instance template IP to match the Apigee instance IP.
SeeChanging instance IPs.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-28 UTC."],[[["\u003cp\u003eThis document provides troubleshooting steps for common errors encountered during the installation and configuration of Apigee, excluding Apigee hybrid.\u003c/p\u003e\n"],["\u003cp\u003eA \u003ccode\u003e401 (UNAUTHENTICATED)\u003c/code\u003e error typically indicates expired credentials, requiring a renewal of the authorization token.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eRANGES_EXHAUSTED\u003c/code\u003e error when creating a new instance means a new IP address range must be requested by executing gcloud commands to update your connection request.\u003c/p\u003e\n"],["\u003cp\u003eWhen creating an Apigee organization, a \u003ccode\u003e409 (Conflict)\u003c/code\u003e error indicates the organization name already exists and a different, globally unique name must be used.\u003c/p\u003e\n"],["\u003cp\u003eA \u003ccode\u003e502 (Bad Gateway)\u003c/code\u003e error during sample proxy deployment suggests an issue with the load balancer, which can be resolved by checking the load balancer's health and potentially doing a rolling restart on the instance group.\u003c/p\u003e\n"]]],[],null,["# Troubleshooting the Apigee installation\n\n*This page\napplies to **Apigee** , but not to **Apigee hybrid**.*\n\n\n*View [Apigee Edge](https://docs.apigee.com/api-platform/get-started/what-apigee-edge) documentation.*\n\nThis document lists common errors and describes possible resolutions for\nwhen you install and configure Apigee.\n\nCreating a new instance\n-----------------------\n\nThis section describes common errors and possible resolutions after sending a request to Apigee\nto create a new instance:\n\n- `401 (UNAUTHENTICATED)` indicates that your credentials may have timed out. Try renewing your authorization token, as the following example shows: \n\n ```\n AUTH=\"Authorization: Bearer $(gcloud auth print-access-token)\"\n ```\n- `RANGES_EXHAUSTED` indicates that the range of IP addresses that you initially requested could not be accommodated and that you must request a new range. You initially created a range request in [Step 2: Set up networking](/apigee/docs/api-platform/get-started/configure-service-networking).\n 1. Create these environment variables \n\n ```\n RANGE_NAME_1=YOUR_RANGE_NAME_1\n RANGE_NAME_2=YOUR_RANGE_NAME_2\n NETWORK_NAME=YOUR_NETWORK_NAME\n ```\n 2. Verify the details of the existing address ranges and ensure it will not overlap with the new range. \n\n ```\n gcloud compute addresses list --global --project=$PROJECT_ID\n ``` \n\n ```\n gcloud compute addresses describe $RANGE_NAME_1 --global --project=$PROJECT_ID \n ```\n 3. To request a new range from which Apigee chooses an IP address for the private service connections execute the following **gcloud** command: \n\n ```\n gcloud compute addresses create $RANGE_NAME_2\n --project=$PROJECT_ID --global --prefix-length=16\n --description=\"additional peering range for Google services\" --network=$NETWORK_NAME\n --purpose=VPC_PEERING \n ```\n 4. This command creates a new range named **$RANGE_NAME_2**.\n 5. Verify the details of both the old and new address range \n\n ```\n gcloud compute addresses list --global --project=$PROJECT_ID \n ``` \n\n ```\n gcloud compute addresses describe $RANGE_NAME_1 --global --project=$PROJECT_ID \n ``` \n\n ```\n gcloud compute addresses describe $RANGE_NAME_2 --global --project=$PROJECT_ID \n ```\n 6. Verify the existing VPC peering details: \n\n ```\n gcloud services vpc-peerings list \\\n --network=$NETWORK_NAME \\\n --service=servicenetworking.googleapis.com \\\n --project=$PROJECT_ID \n ```\n 7. Execute the following command to update your connection request: \n\n ```\n gcloud services vpc-peerings update\n --service=servicenetworking.googleapis.com --network=$NETWORK_NAME\n --ranges=$RANGE_NAME_1,$RANGE_NAME_2 --project=$PROJECT_ID \n ```\n | **Note:** You must specify the name of your first range (in this case, `RANGE_NAME_1`) and a name for your newly requested range (in this case, `RANGE_NAME_2`). For more information, see [gcloud services\n | vpc-peerings update](/sdk/gcloud/reference/services/vpc-peerings/update).\n 8. Verify the existing VPC peering details: \n\n ```\n gcloud services vpc-peerings list \\\n --network=$NETWORK_NAME \\\n --service=servicenetworking.googleapis.com \\\n --project=$PROJECT_ID \n ```\n\nCreating an Apigee organization\n-------------------------------\n\nThe following example shows a common error that Apigee might display when you first try to create\nan organization: \n\n```text\n Apigee API (staging) has not been used in project 59387731598 before or it is disabled. \n Enable it by visiting https://console.developers.google.com/apis/api/staging-apigee.sandbox.googleapis.com/overview?project=59387731598 then retry. \n If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.\n```\n\nThis means that one or more of the required APIs is not enabled. Review the APIs listed in\n[Step 1: Enable required APIs](/apigee/docs/api-platform/get-started/enable-apis) and be sure that all APIs are enabled before you continue.\n\nIn addition, you might get one of the following HTTP errors:\n\n- `401 (UNAUTHENTICATED)` indicates that your credentials may have timed out. Try renewing your authorization token, as the following example shows: \n\n ```\n AUTH=\"Authorization: Bearer $(gcloud auth print-access-token)\"\n ```\n- `404 (Not Found)` can be the result of the following:\n - You entered the wrong endpoint/request URL. Check that you specified `apigee.googleapis.com` for the API call's domain.\n - Your project might not yet be provisioned. Contact [Apigee Sales](https://pages.apigee.com/contact-sales-reg.html).\n- `409 (Conflict)` usually indicates that the given organization name already exists. Organization names must be globally unique. Choose another name for the organization and re-issue the command. (You specify the name in the payload of the request if you are creating an organization on the command line. Keep in mind that you must create an organization that has the same name as your project, so this really shouldn't happen unless there's a typo.)\n\nThe following is a possible error that Apigee might return when you check the status of a new\norganization request:\n\n- `403 (Permission Denied)` could indicate that the organization has not yet been created. Wait another minute and try again. If Apigee returns a `403` when you first try to create the new organization, it could mean that one or more of your APIs have not been enabled. Be sure that you enabled all the APIs as described in [Step 1: Enable required APIs](/apigee/docs/api-platform/get-started/enable-apis) .\n\nDeploying samples\n-----------------\n\n### Load balancer not healthy\n\nWhen deploying a sample proxy, Apigee might return a `502 (Bad Gateway)` HTTP error.\nIn this case, try the following:\n\n1.\n Check the health of the Load Balancer. The Load balancer tab shows all load\n balancers for the project and their statuses. A yellow triangle indicates\n that the load balancer backend service is not healthy.\n\n In the Google Cloud console, go to the **Network services \\\u003e Load balancing** page.\n\n [Go to Load balancing](https://console.cloud.google.com/net-services/loadbalancing)\n2. After confirming an issue with the load balancer, check the VMs in your runtime instance to ensure that they are up and healthy.\n3. Look at the log files to see if you can find an error or other type of issue that might have lead to a problem. For more information on enabling and viewing logs, see [Viewing logs](/load-balancing/docs/https/https-logging-monitoring#viewing_logs).\n4. Try doing a rolling restart on the instance group in Cloud console:\n 1. In the Google Cloud console, go to the **Compute Engine \\\u003e Instance groups** page.\n\n [Go to Instance groups](https://console.cloud.google.com/compute/instanceGroups)\n 2. From the list of instance groups, click the one that is not responding in the **Name** column.\n 3. Click **Rolling Restart/Replace**.\n 4. On the next screen, click **Restart** .\n\n This restarts the Envoy instance.\n\n### Incorrect instance IP\n\n\nIf at any time you delete and recreate your Apigee instance,\nthe Apigee instance IP changes and can become out of sync with the managed instance group (MIG)\ntemplate's endpoint IP. For example, the MIG template will still have the old IP from the\ndeleted instance. The MIG template was created during the Apigee [provisioning process](/apigee/docs/api-platform/get-started/install-cli#external). In this situation, try the following steps to update the MIG template with\nthe correct Apigee IP:\n\n1. In the Google Cloud console, go to the **Apigee \\\u003e Admin \\\u003e Instances** page.\n\n [Go to Instances](https://console.cloud.google.com/apigee/instances)\n2. Note the IP Address of the instance. You will need to know this IP in a later step. For example: `10.117.200.2`.\n3. In the Google Cloud console, go to the **Instance templates** page.\n\n [Go to Instance templates](https://console.cloud.google.com/compute/instances)\n4. Open the instance template. You need to open the instance template that is used by the backend that is mapped to your load balancer.\n5. Scroll down to find the `ENDPOINT` IP under the **Custom metadata** section.\n6. If the endpoint IP differs from the one you noted in the Apigee UI, you must change the Instance template IP to match the Apigee instance IP. See [Changing instance IPs.](/apigee/docs/api-platform/system-administration/change-instance-ips)"]]
