Delay Azure Bastion to reduce contention

azure-py-virtual-data-center/README.md

@@ -52,6 +52,8 @@ After cloning this repo, `cd` into the `azure-py-virtual-data-center` directory
  $ pulumi config set azure_bastion "true"
  $ pulumi config set forced_tunnel "10.0.100.1"
  ```
+
+ Note that it is advisable to add Azure Bastion on the second pass to avoid contention.
 
 1. Deploy the `prod` stack with the `pulumi up` command. This may take up to an hour to provision all the Azure resources specified, including gateways, firewall and bastion hosts:
 

azure-py-virtual-data-center/hub.py

@@ -270,7 +270,7 @@ def __init__(self, name: str, props: HubProps, opts: ResourceOptions=None):
  stem = name,
  virtual_network_name = hub.name,
  address_prefix = str(abs_nw),
- depends_on = [hub_gw_sn],
+ depends_on = [hub_er_gw, hub_vpn_gw],
  )
 
  # VNet Peering between stacks using StackReference (optional)

azure-py-virtual-data-center/spoke.py

@@ -111,7 +111,7 @@ def __init__(self, name: str, props: SpokeProps,
  stem = name,
  virtual_network_name = spoke.name,
  address_prefix = str(abs_nw),
- depends_on = [spoke, props.hub.fw],
+ depends_on = [hub_spoke, spoke_hub, spoke_rt],
  )
 
  # add route from firewall to corresponding spoke in peered stack