Azure / Azure/bicep

Parallel access to Microsoft.Keyvaults

Open
#3,113 6 comments 1 reaction 0 assignees View on GitHub
enhancement provider improvement
Dominant language
Bicep
Stars
3.6k
Forks
830
Avg merge
1d 21m
Merged PRs (30d)
79

Description

**Is your feature request related to a problem? Please describe.**
In a bicep file that in parallel creates modules that in parallel set keyvault secrets we hit this runtime problem:

```json
{
"status": "Failed",
"error": {
"code": "ConflictError",
"message": "A conflict occurred that prevented the operation from completing. The operation failed because the Microsoft.KeyVault.UnifiedStorage.Core.DomainModel.ResourceId 'Key Vault' changed from the point the operation began. This can happen if parallel operations are being performed on the Microsoft.KeyVault.UnifiedStorage.Core.DomainModel.ResourceId. To prevent this error, serialize the operations so that only one operation is performed on the Microsoft.KeyVault.UnifiedStorage.Core.DomainModel.ResourceId at a time. Follow this link for more information: https://go.microsoft.com/fwlink/?linkid=2147741"
}
}
```

**Describe the solution you'd like**
Is there a way to detect this in Bicep and signal a potential issue? Should `@batchSize(1)` be suggested in such cases?

Contributor guide

Open the contributing guide

Research direction

The issue names no repository files, tests, or entry points. Start by reviewing how Bicep handles parallel module deployments and the @batchSize(1) decorator, then determine whether this Key Vault conflict can be detected statically. Done should define a clear diagnostic or recommendation and tests for the reported deployment pattern.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.