Azure / Azure/azure-cli

Deployments failing on App GW NSG rule validation after initial deployment

Open
#22,434 8 comments 0 reactions 1 assignee Claimed by @zhoxing-ms View on GitHub
act-identity-squad ARM Auto-Assign customer-reported Service Attention
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

### **This is autogenerated. Please review and update as needed.**

## Describe the bug

After initial greenfield deployment, future deployments fail on Application Gateway NSG validation, previously reported in #21256 and was seemingly working again in a previous version.

**Command Name**
`az deployment group create`

**Errors:**
```
{"status":"Failed","error":{"code":"DeploymentFailed","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.","details":[{"code":"Conflict","message":"{\r\n \"status\": \"Failed\",\r\n \"error\": {\r\n \"code\": \"ResourceDeploymentFailure\",\r\n \"message\": \"The resource operation completed with terminal provisioning state 'Failed'.\",\r\n \"details\": [\r\n {\r\n \"code\": \"DeploymentFailed\",\r\n \"message\": \"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.\",\r\n \"details\": [\r\n {\r\n \"code\": \"BadRequest\",\r\n \"message\": \"{\\r\\n \\\"error\\\": {\\r\\n \\\"code\\\": \\\"ApplicationGatewaySubnetInboundTrafficBlockedByNetworkSecurityGroup\\\",\\r\\n \\\"message\\\": \\\"Network security group /subscriptions/xxx/resourceGroups/rg-weu-aksaccelerator-1/providers/Microsoft.Network/networkSecurityGroups/appgw blocks incoming internet traffic on ports 65200 - 65535 to subnet /subscriptions/xxxx/resourceGroups/rg-weu-aksaccelerator-1/providers/Microsoft.Network/virtualNetworks/vnet-weu-aksaccel/subnets/appgw, associated with Application Gateway /subscriptions/xxx/resourceGroups/rg-weu-aksaccelerator-1/providers/Microsoft.Network/applicationGateways/appgw-weu-aksaccel. This is not permitted for Application Gateways that have V2 Sku.\\\",\\r\\n \\\"details\\\": []\\r\\n }\\r\\n}\"\r\n }\r\n ]\r\n }\r\n ]\r\n }\r\n}"}]}}

```

## To Reproduce:
Steps to reproduce the behaviour. Note that argument values have been redacted, as they may contain sensitive information.

Run the deployment a second time

## Expected Behaviour

Deployment should succeed

## Environment Summary
```
Windows-10-10.0.19043-SP0
Python 3.10.4
Installer: MSI

azure-cli 2.36.0
```
## Additional Context

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.