Unable to rerun code for Microsoft.Network/networkVirtualAppliances and a firewall is connected
- Dominant language
- TypeScript
- Stars
- 108
- Forks
- 44
- Avg merge
- 18h 53m
- Merged PRs (30d)
- 29
Description
**Bicep version**
Bicep CLI version 0.28.1 (ba1e9f8c1e)
**Describe the bug**
When creating a vWan hub with a secure hub using PaloAlto (PaloAltoNetworks.Cloudngfw/firewalls) it needs a NVA that is required to be created
Creating the resource works fine, but rerunning the code will set the deployment to fail with the error "NvaAccessDeniedForTheApp"
**To Reproduce**
Create a vwan with a paloAlto FW and the NVA resource with the following code, when the firewall is deployed
```
resource firewallNVA 'Microsoft.Network/networkVirtualAppliances@2023-11-01' = if(!existingNVA) {
name: '${firewallName}-nva'
location: location
properties: {
virtualHub: {
id: virtualHubId
}
delegation: {
serviceName: 'PaloAltoNetworks.Cloudngfw/firewalls'
}
}
}
```
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the provided Microsoft.Network/networkVirtualAppliances@2023-11-01 resource declaration and reproduce the deployment using a vWAN secure hub with a PaloAlto firewall. Compare the initial deployment with the rerun that returns NvaAccessDeniedForTheApp; done means the same declaration can be rerun successfully without that error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100