Cannot connect to, restart, reapply, redeploy Azure VM

Question

Cannot connect to, restart, reapply, redeploy Azure VM

w Kon 11

Hi,

I have an Azure VM (Linux, V1, agent version 2.7.3.0) running a Grafana Bitname Image.
The VM is running. I can access the Grafana page through its public IP address. Also, on the VM resource overview page it is showing 'running'.

However, I cannot connect to the VM. Not through Bastion, not through PuTTY and also not through the serial console.
I don't know whether I am using the right credentials, so I wanted to reset these through the 'Reset password' tab on the VM blade. However here it is giving the following notification:
"The virtual machine must be running before using VMAccess."
And I cannot reset anything.

Wanting to check if reapply/redeploy/restart would solve this issue. I get the following error:

restart:
Failed to restart the virtual machine 'vm-grafana-test'. Error: Cannot proceed with operation because resource rg-grafana-test/providers/Microsoft.Network/applicationGateways/ag-grafana-test/backendAddressPools/ag-grafana-test-pool'>ag-grafana-test/ag-grafana-test-pool used by resource /subscriptions/xxxxxxxxxxxxxxxxxxxx/resourceGroups/rg-grafana-test/providers/Microsoft.Network/networkInterfaces/vm-grafana-test24 is not in Succeeded state. Resource is in Failed state and the last operation that updated/is updating the resource is PutApplicationGatewayOperation.

Which means there is something wrong with the backend pool? But I have no clue how to fix this.

1 answer

Your answer

Answer 1

Jackson Martins 10,621 MVP Volunteer Moderator

Hi @w Kon
I faced a similar problem with NIC, but in your case need to PutApplicationGatewayOperation on manually
To solve I used resource explorer.

Go to https://resources.azure.com/

Chante tab to read/write:

On the left size, go to -> Subscription/ you subscription -> /resourceGroups/rg-grafana-test/providers/Microsoft.Network/networkInterfaces/vm-grafana-test24

Click in edit button:

So, click on the PUT button:

Get in touch if you need more help with this issue.

--please don't forget to "[Accept the answer]" if the reply is helpful--

Jackson Martins 10,621 Reputation points MVP Volunteer Moderator

2022-08-10T12:35:24.347+00:00

If it doesn't work, do the same with your application gateway

rg-grafana-test/providers/Microsoft.Network/applicationGateways/ag-grafana-test/backendAddressPools/ag-grafana-test-pool'>ag-grafana-test/ag-grafana-test-pool
Jackson Martins 10,621 Reputation points MVP Volunteer Moderator

2022-08-10T20:51:31.393+00:00

@w Kon
Just checking if there's any progress or updates?
Please "[Accept the answer]" if the information helped you. This will help us and others in the community as well.
w Kon 11 Reputation points

2022-08-12T10:45:30.497+00:00

Hi @Jackson Martins ,

Thanks a lot for your reply.

I am a bit unsure what to change? Should I changed all the states from Failed to succeeded? I cannot find the /ag-grafana-test/backendAddressPools/ag-grafana-test-pool or the PutApplicationGatewayOperation.

Best,
Wout
Jackson Martins 10,621 Reputation points MVP Volunteer Moderator

2022-08-12T10:47:23.893+00:00

did you run it on the network card (nic)?
w Kon 11 Reputation points

2022-08-12T10:49:06.787+00:00

Unfortunately, just pressing Edit and then Put shows a yellow triangle and the resource remains in Failed provisioningState
Jackson Martins 10,621 Reputation points MVP Volunteer Moderator

2022-08-12T10:50:42.073+00:00

Can you post the screenshot from providers?
w Kon 11 Reputation points

2022-08-12T10:54:34.547+00:00

Do you mean if I did Edit>Put on Microsoft.Network/networkInterfaces/vm-grafana-test24. I did this and worked. But it still gives the yellow triangle for the applicationGatewat and the VM.

These are options I have:
w Kon 11 Reputation points

2022-08-12T11:08:15.197+00:00

I now see it's giving this error for the provisioning of the NSG:
Jackson Martins 10,621 Reputation points MVP Volunteer Moderator

2022-08-12T12:15:42.35+00:00

This error is different from the other one, this one is showing a certificate error in your app gateway, there is a thread here explaining about this error

You need to use a pfx certificate for appgw:

https://learn.microsoft.com/en-us/answers/questions/445293/error-when-adding-certificate-to-azure-app-gateway.html

About the other error is a NIC related PUT error
w Kon 11 Reputation points

2022-08-12T13:06:01.267+00:00

Haha this quite funny. The person asking the question in that thread is the previous employee who has set this up...
I will look into it
Jackson Martins 10,621 Reputation points MVP Volunteer Moderator

2022-08-12T14:11:58.533+00:00

@w Kon
what a coincidence!

But they are two different problems, I don't know if it's related, review the issue of the digital certificate and then we'll continue the PUT update

Best
w Kon 11 Reputation points

2022-08-12T14:41:38.847+00:00
To be frank, I am getting a bit lost here, and getting the feeling I am just running from error to error.

1.I cannot get to fix the SSL issue for the https-listener. I have made a new password enrypted .pfx file, and uploaded at

However this just gives the same error I get with any other SSL addition method (such as through the KeyVault PEM):

Failed to save configuration changes to application gateway 'ag-grafana-test'. Error: Either Data or KeyVaultSecretId must be specified for Certificate 'rg-grafana-test/providers/Microsoft.Network/applicationGateways/ag-grafana-test/sslCertificates/certificate-{company}-v2'>ag-grafana-test/certificate-{company}-v2' in Application Gateway.

where certificate-{company}-v2 is note even the certificate name of the one I am adding.
This causes me to believe that the Application Gateway is just stuck in a failed state.

Application Gateway stuck in a failed state:

When I am trying to just redeploy the Application Gateway I get error:

...

All right, nevermind, I have completely broken everything.
Jackson Martins 10,621 Reputation points MVP Volunteer Moderator

2022-08-15T16:31:43.857+00:00

Hi @w Kon

Sorry for the delay, try to allow keyvault access from "all networks" and try to remove and recreate de rule.

Best

Share via

Cannot connect to, restart, reapply, redeploy Azure VM

1 answer

Your answer