Cannot remove resources due to invalid configuration (deployment stack missing)

Johannes 10 Reputation points
2024-11-06T13:58:41.0633333+00:00

I tried to remove a Resource Group but due to ignorance something went wrong causing a "invalid state". I had created a container app using Terraforms and I tried to remove that. Since it is a while ago I don't remember if it was trough a Terraform destroy action or that I did it using the portal but I removed everything in the resource group as intended. Except one resource everything was removed. The thing that still exists is a container app. I did try to remove in manually again but get an error, that I do have the right permissions but "however, the access is denied because of the deny assignment with name"

How do I force remove this resource?

I already found this article: https://learn.microsoft.com/en-us/answers/questions/1863369/orphan-resource-group-wont-delete

but it didn't help because there are no lock, there is no delployment stack and the resouce-group is also in a invalid state. If I run: "remove-azresource -ResourceId '/subscriptions/000000-0000-0000-0000-0000000000/resourceGroups/EBI-TerraFormTest_FunctionApps_0000000-0000-0000-0000-0000000000' -Force" I got Remove-AzResource: ResourceGroupNotFound : Resource group 'EBI-TerraFormTest_FunctionApps_0000000-0000-0000-0000-0000000000' could not be found.

Azure Container Apps
Azure Container Apps
An Azure service that provides a general-purpose, serverless container platform.
465 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Johannes 10 Reputation points
    2024-11-14T08:59:46.9133333+00:00

    This morning I have found the cause. The created "Container App" is used by the "Function App" which is deployed in/part of a "Container Apps Environment". Removing the function and "Container Apps Environment" makes it possible to delete the "Container App" too

    1 person found this answer helpful.

  2. LeelaRajeshSayana-MSFT 16,611 Reputation points
    2024-11-07T21:18:31.6266667+00:00

    Hi @Johannes Greetings! Welcome to Microsoft Q&A forum. Thank you for posting this question here.

    Considering that the resource group is in invalid state, can you try running the following command using Azure CLI and see if it helps in removing the resource group

    az group delete --name <YourResourceGroupName> --yes --no-wait
    
    
    

    If the resource group fails to delete, run the following command against the resource group to list any deny assignments.

    az role assignment list --scope "/subscriptions/000000-0000-0000-0000-0000000000/resourceGroups/YourResourceGroupName" --output json | jq '.[] | select(.roleDefinitionName=="DenyAssignment")'
    
    

    If you find any deny assignments, you can run the following command to delete it

    az role assignment delete --assignee <PrincipalId> --role "DenyAssignment" --scope "/subscriptions/<SubscriptionId>/resourceGroups/<YourResourceGroupName>"
    
    
    

    Try deleting the resource group again with the first command after removing the deny assignments. If the command fails, try the following command to explicitly delete the Container App and then delete the resource group

    az resource delete --ids /subscriptions/000000-0000-0000-0000-0000000000/resourceGroups/<YourResourceGroupName>/providers/Microsoft.App/containerApps/<ContainerAppName>
    
    

    Please let us know if you still cannot delete the resource group after trying the above steps> Update

    The created "Container App" is used by the "Function App" which is deployed in/part of a "Container Apps Environment". Removing the function and "Container Apps Environment" makes it possible to delete the "Container App"

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.