Vnet deletion error: InUseSubnetCannotBeDeleted

Question

Vnet deletion error: InUseSubnetCannotBeDeleted

Ezekiel Stone 10

Service: Vnet

Operation: Delete

Error: InUseSubnetCannotBeDeleted

/subscriptions/c511dddf-09cc-4b7e-8ce6-0990856101b0/resourceGroups/GlassCaldher/providers/Microsoft.Network/virtualNetworks/glasscaldh-99ee0574dd-vnet/subnets/glasscaldh-9806365fc9-appsubnet/serviceAssociationLinks/AppServiceLink está usando la subred glasscaldh-9806365fc9-appsubnet y no se puede eliminar.

No se pudo eliminar la subred "glasscaldh-9806365fc9-appsubnet". Error: glasscaldh-99ee0574dd-vnet/glasscaldh-9806365fc9-appsubnet/AppServiceLink está usando la subred glasscaldh-9806365fc9-appsubnet y no se puede eliminar.

I tried all the possible solutions on the forums and Q&A post related but still cant delete that resource. I need technical help please.

3 answers

Your answer

Answer 1

@Ezekiel Stone

This happens when you delete an App Service integrated into the VNet without removing the integration.

Reason for this Error:
The VNET integration feature must set locks on subnets in the Network Resource Provider, we set these locks by putting a structure called a Service Association Link(SAL) onto the Subnet, which is a privileged operation that only Microsoft.Web and some other internal Azure services have access to, this ends up being odd cases where these locks don't get cleaned up. The result is that the customer will have a subnet that cannot be deleted or used because a Service Association Link still exists on the subnet.

To delete this SAL from your end,

Create App Service Plan with the same name as the deleted one
Create App Service with the same name as the deleted one
Link App Service with the VNET subnet
Disconnect VNet from App Service -> Networking -> VNet integration -> Disconnect
Delete subnet
Then delete the AppService

In case the work around did not help

To delete this SAL, we will need a specialized 1:1 session, where a support engineer can delete this lock. If you have a support plan you may file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

Cheers,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Ezekiel Stone 10 Reputation points

2023-05-05T18:57:41.76+00:00

Hi KapilAnanth, thank you for your anwser. I tried the 6 steps that you mention but the vnet and his subnet still can't be deleted. I haven't a plan that includes technical support, so if you can help me to generate a one-time free technical support I'll be very greatful.

Thx.
ChaitanyaNaykodi-MSFT 27,476 Reputation points Microsoft Employee Moderator

2023-05-05T19:50:02.1766667+00:00

@Ezekiel Stone

In order to generate this one-time free support could you please send an email to azcommunity@microsoft.com with the below details.

Subject : Attn Chaitanya

Thread URL: Link to this thread.

Subscription ID

Please let me know once you have done the same.
TJ Walia 20 Reputation points

2023-09-02T03:51:09.1133333+00:00

Having the same issue. I have sent an email for assistance.

Answer 2

RevelinoB 3,675

Hi Ezekiel,

When I look at the error message you provided, it appears that you are trying to delete a subnet named "glasscaldh-9806365fc9-appsubnet" within a virtual network named "glasscaldh-99ee0574dd-vnet". However, the deletion is failing because there is a service association link (AppServiceLink) that is currently using this subnet. Due to this dependency, the subnet cannot be deleted.

To fix this issue, you need to remove the association between the AppServiceLink and the subnet before attempting to delete the subnet again. Here are the steps you can follow:

Identify the AppServiceLink that is associated with the subnet "glasscaldh-9806365fc9-appsubnet". You can find this information in the Azure portal or by using Azure CLI or Azure PowerShell.
Once you have identified the AppServiceLink, you need to remove the association. Depending on the type of resource associated with the link, there are different ways to do this:

If it is an Azure App Service, you can go to the App Service settings in the Azure portal, navigate to the Networking section, and remove the VNet integration configuration that references the subnet.

If it is an Azure Function App, you can follow similar steps as for the App Service, but in the Function App settings.

If it is a different type of resource, refer to the documentation specific to that resource to find the steps for removing the VNet integration or service association.

After removing the association, wait for a few minutes to ensure that the changes propagate.

Try deleting the subnet "glasscaldh-9806365fc9-appsubnet" again. It should now be possible to delete the subnet successfully.

If you have checked these steps and are still experiencing issues, please provide additional details about the specific resources involved (such as the type of service associated with the subnet) so that I can assist you further?

Ezekiel Stone 10 Reputation points

2023-05-05T04:42:29.0433333+00:00

Hi, thank you very much for your answer. I haven´t any App Service because i deleted all, but this vnet couldn't be deleted.

This is how my "all resources page" look:

this is how the "all devices connected" page looks like:

And this is the subnet i can't delete:

I dont know what else i can do.
RevelinoB 3,675 Reputation points

2023-05-05T04:47:00.72+00:00

Hi Ezekiel,

In my perspective you have already deleted all App Services associated with the subnet and are still unable to delete the virtual network (VNet), there might be another resource or service that is using the subnet and preventing its deletion. Here are a few additional checks you can take to troubleshoot the issue:

Check for any other resources or services using the subnet: Sometimes, there might be other resources, such as virtual machines (VMs), network security groups (NSGs), or network interfaces (NICs), that are still using the subnet. Ensure that all resources associated with the subnet have been deleted or removed.

Verify the subnet association for network interfaces: If you have any network interfaces that were associated with the subnet, ensure that they have been disassociated or deleted. Network interfaces can hold references to subnets and prevent their deletion.

Remove any network security group (NSG) rules associated with the subnet: NSG rules can reference specific subnets. Verify if there are any NSG rules associated with the subnet you want to delete, and remove them if necessary.

Check for any peering connections: If the VNet has peering connections with other VNets, verify if any of the peering connections are using the subnet. If so, delete the peering connections or update them to exclude the subnet you want to delete.

Ensure there are no active connections or gateways: If you have any active VPN gateways, ExpressRoute gateways, or other connections associated with the VNet, check if they are using the subnet. Remove or update the connections to exclude the subnet you want to delete.

Review the Azure Portal Activity Log: The Activity Log in the Azure Portal can provide insights into any recent operations or issues related to the VNet or subnet. Check for any error messages or failed operations that might indicate why the deletion is being blocked.

I hope this helps?
Ezekiel Stone 10 Reputation points

2023-05-05T05:22:26.22+00:00

I have reviewed all the points mentioned, however there are not any other services linked to the subnet. Thank you for your support.
RevelinoB 3,675 Reputation points

2023-05-05T06:38:29.0633333+00:00
Hi Ezekiel,

Thanks for the additional information. If you have verified that there are no other resources or services associated with the subnet and you are still unable to delete it, there might be a few steps you can try to resolve the issue.

Check for any hidden or orphaned resources: It's possible that there might be hidden or orphaned resources that are still referencing the subnet but are not easily visible in the Azure portal. You can try using Azure CLI or Azure PowerShell to list all resources in the subscription and search for any resources that might be associated with the subnet.

Validate the permissions and access rights: Ensure that you have the necessary permissions and access rights to delete the subnet. You need to be a member of the network contributor or have the appropriate role-based access control (RBAC) permissions to delete the subnet. If you are not the owner or administrator of the Azure subscription, check with the relevant permissions holder to ensure you have the necessary privileges.

Attempt deletion using Azure PowerShell or Azure CLI: If you have been using the Azure portal for the deletion attempts, try using Azure PowerShell or Azure CLI instead. Sometimes, different interfaces can yield different results, and using the command-line tools might provide additional insights or error messages.

I hope this helps? Please let me know.

Answer 3

TP 124.7K Volunteer Moderator

Hi,

In the Azure portal, please open the Virtual Network, click on Subnets blade, then click on glasscaldh-9806365fc9-appsubnet. Under Subnet Delegation, change it from Microsoft.Web/serverFarms to None, click Save. Similar to screenshot below:

azure vnet subnet delegation

After completing the above please test to see if you can delete the VNet. It may not allow you to remove the delegation. If it gives you an error, please leave a comment.

Thanks.

-TP

Ezekiel Stone 10 Reputation points

2023-05-05T18:54:35.6333333+00:00

Thank you very much, it didnt work. When i change the "delegate subnet to a service" to "None" and i click on save then an error appears saying that i cant save the changes because de subnet is on use.

Share via

Vnet deletion error: InUseSubnetCannotBeDeleted

3 answers

Your answer