Unable to delete VNet due to serviceAssociationLinks/AppServiceLink

Question

Unable to delete VNet due to serviceAssociationLinks/AppServiceLink

Kien_NDM 96

Hi,

I have deployed an Azure system including virtual networks and app services. Then, when doing virtual network deletion, I had some problems. I got the message and the subnet uses the above vnet. Then I delete the subnet and get the message that there are app services using the above subnet. In fact, there are no app services at all. When using the command below:

az network vnet subnet list --resource-group [...] --vnet-name [...]

As a result, I discovered that 1 [Microsoft.Network/virtualNetworks/subnets/serviceAssociationLinks] cannot be deleted.

Remove-AzureRmVirtualNetwork : Subnet snet-bo is in use by /subscriptions/[..id...]/resource
Groups/Disabled/providers/Microsoft.Network/virtualNetworks/vnet-drug/subnets/snet-bo/serviceAssociationLinks/AppServic
eLink and cannot be deleted. In order to delete the subnet, delete all the resources within the subnet. See
aka.ms/deletesubnet.
StatusCode: 400
ReasonPhrase: Bad Request
OperationID : 'bbc8987b-ffd1-420e-80c7-5913ef43b069'
At line:1 char:1

Remove-AzureRmVirtualNetwork -Name vnet-drug -ResourceGroupName disab ...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : CloseError: (:) [Remove-AzureRmVirtualNetwork], NetworkCloudException

FullyQualifiedErrorId : Microsoft.Azure.Commands.Network.RemoveAzureVirtualNetworkCommand

Please support, thank you.

Dylan Elder 25 Reputation points

2023-06-21T20:13:19.6666667+00:00

I'm experiencing the same issues with a recently created vnet and resource group. Super frustrating.
Carlos Bernardo Jr 20 Reputation points

2023-07-07T11:00:44.7666667+00:00

Same here. Can't delete and the workaround won't work.
Doug Nelson 5 Reputation points

2023-08-09T12:47:40.4+00:00

I have the same issue. I have deleted all items in the resource group except for the Subnets in the Virtual Network. I am still being charged for an Azure Database for MySQL Flexserver that doesn't exist.

HELP PLEASE!

Dylan Elder 25 Reputation points

2023-06-21T20:13:19.6666667+00:00

I'm experiencing the same issues with a recently created vnet and resource group. Super frustrating.
Carlos Bernardo Jr 20 Reputation points

2023-07-07T11:00:44.7666667+00:00

Same here. Can't delete and the workaround won't work.
Doug Nelson 5 Reputation points

2023-08-09T12:47:40.4+00:00

I have the same issue. I have deleted all items in the resource group except for the Subnets in the Virtual Network. I am still being charged for an Azure Database for MySQL Flexserver that doesn't exist.

HELP PLEASE!

Answer 1

suvasara-MSFT 9,931

@Kien_NDM , Apologies for the delay in response. This is a known issue, and the only way you will be able to get this deleted is to contact Azure Support. If you do not have a support plan, please Email me at with your subscription ID and a link to this post, and I will enable a one-time free support request for you to get the subnet deleted.

Workaround:

Create App Service Plan with the same name as the deleted one
Create App Service with the same name as the deleted one
Link App Service with the VNET subnet
Disconnect VNet from App Service -> Networking -> VNet integration -> Disconnect
Delete subnet

Reason for this Error:
The new VNET integration feature (Regional Vnet Integration) must set locks on subnets in the Network Resource Provider, we set these locks by putting a structure called a Service Association Link onto the Subnet, which is a privileged operation that only Microsoft.Web and some other internal Azure services have access to, this ends up being odd cases where these locks don't get cleaned up. The result is that the customer will have a subnet that cannot be deleted or used because a Service Association Link still exists on the subnet.
Azure App Service and Azure Networking Product Group keep working on to fix the issue completely.

----------

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

suvasara-MSFT 9,931 Reputation points

2020-12-04T09:30:22.573+00:00

@Kien_NDM ,

If you think your question has been answered, click "Mark as Answer" if just helped click "Vote as helpful". This can be beneficial to other community members reading this forum thread.

Best regards
Subhash
Andrew Hunt 31 Reputation points

2021-02-24T19:59:33.99+00:00

Is there any progress on this fix? I did two separate ARM deployments that setup a VNet integration to app service and both hit this issue which makes me think your comment about it sometimes not getting cleaned up should be amended to say always not getting cleaned up. We spin up and down entire resource group deployments which will now include such vnet integrations with app service and having them not delete properly on an ongoing basis is going to cause significant clutter on our subscription.
a4andrew 26 Reputation points

2021-03-09T19:35:48.66+00:00

What happens if you have forgotten the name of the original app service?
Andrew Hunt 31 Reputation points

2021-03-10T14:38:50.6+00:00

Updating to include that more than clutter this now fails our resource group deletions which is a deeply frustrating user experience for the developers, PMs, and QA who rely on these features as part of our development cycle. Please fix this ASAP
Franciosi, Tom 1 Reputation point

2021-07-22T18:51:09.593+00:00

Well, that worked for me and the persistent VNET is gone. Thanks!
Ryan Hill 20,966 Reputation points Microsoft Employee

2021-07-26T16:27:17.597+00:00

If you have forgotten the name, you can use Get-AzDeletedWebApp (Az.Websites) | Microsoft Learn to retrieve the app name. For getting the details of the app service plan, you can go to Resource explorer from your portal. After going, you can go to the subnet details and you can get the details of previous app service plan in which previous integrated web app is hosted as shown below.
Jiri Mensik 6 Reputation points

2022-08-08T18:00:06.173+00:00

1) In my case support is claiming that they cannot delete any resource on my behalf.
2) For the workaround. My subnet was delegated to Flexible PostgreSQL server. After adding back the server and trying to remove the delegation to "Microsoft.DBforPostgreSQL/flexibleServers" on given subnet I get

Failed to save subnet 'mysubnet'. Error: 'Subnet mysubnet requires any of the following delegation(s) [Microsoft.DBforPostgreSQL/flexibleServers] to reference service association link /subscriptions/someID/resourceGroups/someName/providers/Microsoft.Network/virtualNetworks/someName/subnets/someName/serviceAssociationLinks/someId-service-association-link.'

What should be my next step?
Thank you
Jiri
Jyothi Chaganty 6 Reputation points

2022-10-10T15:40:09.827+00:00

Steps 1 and 2 are fine, but Step 3 is a problem.
I tried creating app service and subscription plan with the same name. but I couldn't assign the subnet to this new resource. It says it is already allocated.
Jiri Mensik 6 Reputation points

2022-10-11T07:48:49.66+00:00

I got it solved with support who claimed it was a bug (they were not specific) which got fixed afterwards. Additionally they deleted the association link.
So, hopefully 1 less issue.
MaiaV 1 Reputation point

2022-12-21T17:35:00.53+00:00

I had 4 webapps in the subnet, I had to follow do workaround for each of them.
But it solved my issue.
Jacin Labrador 0 Reputation points

2023-04-20T22:38:09+00:00

I am having this problem and I do not have a support plan as far as I can tell. Thanks.
Arkia Consulting 0 Reputation points

2023-05-17T13:33:22.4+00:00

As a side note, you don't have to remember the name of the web app, just create any web app with any name. The goal is only to setup a link to the existing subnet, through the named App Service Plan, then disconnect it. The name of the web app does not have to be the same as the deleted one.
Steven Life 5 Reputation points

2023-07-15T19:47:31.4033333+00:00

We can't allocate the existing subnet we want to delete to the new app service other than creating a new subnet. Please suggest what we could do. It seems like it is costing 2 dollars everyday because of this subnet can't be deleted.
Gennaro Eduardo Tangari 5 Reputation points

2023-08-10T12:08:00.14+00:00

I have this problem too: I can't believe that since so long time this problem has not been fixed.
中垣茂(ESM) 0 Reputation points

2023-09-21T02:02:16.87+00:00

This workaround dose not work for my case.

I can not link App Service with the VNET subnet because I can not select the VNET subnet. The reason which can not be selected is the VNET subnet is already delegated.

I'm waiting for one time free support.

thanks

Answer 2

Jose Wildner 5

Hello Team

I had the same issue

but I coulnd't apply the workaround and the azure portal dont leave me open a case for this issue, just fowarding me to this post.

Answer 3

Al Iacovella 0

Just ran into this myself. What gives, this was reported in October 2020 and it is still happening.

Ryan DiFrancesco 0 Reputation points

2023-05-19T17:26:30.84+00:00

If you're able to, open support case in the portal. Once you describe and categorize your issue, it should auto-detect that there is an orphaned AppServiceLink in your subscription and will automatically submit a request to have it removed on the backend. This process worked for me last week.

But, yes, I agree that this should not still be happening.

Answer 4

I'm getting this error as well. I had an Web app + Database and didn't realize that I had to disconnect the subnet from the vnet before deleting the resource group. Not I can't delete the subnet or vnet. I've tried recreating but it either fails because the resource already exists or unable to assign the subnet due to it being assigned already. Any chance of getting a one-time support ticket?

Answer 5

I'm getting this error as well. I had an Web app + Database and didn't realize that I had to disconnect the subnet from the vnet before deleting the resource group. Not I can't delete the subnet or vnet. I've tried recreating but it either fails because the resource already exists or unable to assign the subnet due to it being assigned already. Any chance of getting a one-time support ticket?

Unable to delete VNet due to serviceAssociationLinks/AppServiceLink

5 additional answers

Activity