Azure / Azure/bicep-deploy

Stack Deletion Action Should Not Require DenySettingsMode

Open Beginner friendly
#309 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
64
Forks
20
Avg merge
15h 37m
Merged PRs (30d)
4

Description

In Deployment Stacks, DenySettingsMode is an input property for applying deny assignments. On deletion of the deployment stack, deny assignments are not applied and therefore DenySettingsMode is not a part of the deletion api. I recently had the below definition fail because it was expecting a DenySettingsMode parameter.

This should be all that is required for a stack deletion:

- name: Remove subscription-scope deployment stack
id: stack
uses: azure/bicep-deploy@v2
with:
type: deploymentStack
operation: delete
name: 'my-sub-stack'
scope: subscription
subscription-id: ${{ AZURE_SUBSCRIPTION_ID }}
location: 'eastus'
action-on-unmanage-resources: delete
action-on-unmanage-resourcegroups: delete

Contributor guide

Open the contributing guide

Research direction

Start at the azure/bicep-deploy@v2 entry point for deploymentStack operations and trace validation for delete requests. Verify that deletion no longer requires DenySettingsMode while the other deletion inputs remain supported, then exercise the subscription-scope example to confirm it succeeds without that parameter.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, github-actions, typescript
Domain
cloud, devops
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.