Using Bicep to delete the resources

Question

Using Bicep to delete the resources

BATRA, SUDEEP 6

I used the below command to create resources :
az deployment group create --resource-group jnfcrg01 --template-file ./deploy/main.bicep

How do I delete these resources as well ?

I need to create both deploy and destroy Pipelines, so cant find useful details for the destroy part.

3 answers

Your answer

Answer 1

@BATRA, SUDEEP Thanks for reaching out to Microsoft Q&A, apologize for any inconvenience caused on this.

We don't have any default cmdlet to delete the resources that were created using arm template or through bicep template.

When deploying your resources, you specify that the deployment is either an incremental update or a complete update. The difference between these two modes is how Resource Manager handles existing resources in the resource group that aren't in the template.

For both modes, Resource Manager tries to create all resources specified in the template. If the resource already exists in the resource group and its settings are unchanged, no operation is taken for that resource. If you change the property values for a resource, the resource is updated with those new values. If you try to update the location or type of an existing resource, the deployment fails with an error. Instead, deploy a new resource with the location or type that you need.

The default mode is incremental.
Complete mode: In complete mode, Resource Manager deletes resources that exist in the resource group but aren't specified in the template.

Note : Always use the what-if operation before deploying a template in complete mode. What-if shows you which resources will be created, deleted, or modified. Use what-if to avoid unintentionally deleting resources.

If your deployment got failed and if you want to roll back to last successful recent deployment you can use the parameter -RollbackToLastDeployment in the az deployment group create cmdlet which has couple of limitations as well refer to this documentation.

Feel free to reach back to me if you have any further questions on this.

Answer 2

BATRA, SUDEEP 6

Thanks so I observed in the az cli I have to use --mode complete as below

az deployment group create --template-file deploy/delete.bicep --what-if -g testcrg01 --mode complete

However in the Pipeline I have to use

deploymentMode: Complete

Ref : https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/azure-resource-manager-template-deployment-v3?view=azure-pipelines

Answer 3

BATRA, SUDEEP 6

I do have one question - how do I use What-if in a Pipeline ?

Can you share an example ?

VenkateshDodda-MSFT 24,951 Reputation points Microsoft Employee Moderator

2023-02-07T12:19:35.0566667+00:00

@BATRA, SUDEEP Thanks for your response apologize for the delay in my response.

You can refer to this blog post on how to use what-if in a pipeline to deploy ARM template.

Refer to this documentation for more information on What-if.
Max Bücker 1 Reputation point

2023-03-03T07:24:15.5966667+00:00

In an automated pipeline you usually wouldn't use the What-If option, since the reason for it to exist is to perform a manual check to see, if everything is correct.

In case you want somebody to review the changes for every pipeline run, you could implement a manual approval gate after running in What-If mode, then perform the deployment after approval without What-If.

Aaron Held 1

I'm building some pipeline steps to post put in a manual validation step after the what-if so I can review. It does mean its not fully automated, but it works. Next I want to format the what-if output a bit and post it to the PR as a comment.

stages:
- stage: DeployInfra
  condition: startsWith(variables['Build.SourceBranch'], 'refs/pull/')
  jobs:
    - job: Generate_Deployment_Plan
      steps:
          inputs:
            targetType: 'inline'
            script: 'env | sort'
        - task: AzureCLI@2
          inputs:
            azureSubscription: $(azureServiceConnection)
            scriptType: bash
            scriptLocation: inlineScript
            useGlobalConfig: false
            inlineScript: |
              az group create --name $(resourceGroupName) --location $(location)
              az deployment group create --resource-group $(resourceGroupName) --template-file $(templateFile) --what-if | tee whatif.txt
        - task: Bash@3
          inputs:
            targetType: 'inline'
            script: |
              cat whatif.txt
            failOnStderr: true

    - job: waitForValidation
      displayName: Approval to create the environment
      pool: server
      timeoutInMinutes: 65
      dependsOn: Generate_Deployment_Plan
      steps:
      - task: ManualValidation@0
        timeoutInMinutes: 60
        inputs:
          notifyUsers: |
            ******@domain.com
          instructions: 'Please validate the deployment'
          onTimeout: 'reject'

Share via

Using Bicep to delete the resources

3 answers

Your answer