Delete created resources if deployment failed

Keren Zubovsky 21

Hi,
I am using Python SDK to create a deployment with 2 resources.
In case the deployment fails - is there a flag or a parameter that can be passed to begin_create_or_update deployment function that will cause created resources to be deleted?
Is there any other way?

Thanks!

MuthuKumaranMurugaachari-MSFT 22,276 Reputation points

2022-08-15T15:27:44.98+00:00

@Keren Zubovsky Thank you for reaching out to Microsoft Q&A. Based on your statement, you are using Azure SDK for Python to deploy two resources and I would like to validate if those two resources are API Management resources or any other service included?

I have quickly reviewed our docs: begin_create_or_update and see only one parameter available ApiManagementServiceResource. I couldn't see a parameter that exists to delete the resource in this function and hence I think you cannot delete a resource with this function. Can you elaborate more with a code snippet or sample if my understanding is incorrect?
Keren Zubovsky 21 Reputation points

2022-08-16T05:59:37.577+00:00

@MuthuKumaranMurugaachari-MSFT thanks for your reply.
I've created a deployment template with the following 2 resources: network interface & virtual machine, and then ran begin_create_or_update to create it.
I've noticed that when the deployment creation fails (Code: DeploymentFailed) because the VM creation failed, then the NIC is still created and doesn't get deleted.
I wonder if there is a way to make sure that all the resources are deleted in case the deployment creation fails.

Can I use the ApiManagementServiceResource parameter for this purpose? How?
Is there any other way to handle this?

Thanks!
MuthuKumaranMurugaachari-MSFT 22,276 Reputation points

2022-08-16T13:37:40.483+00:00

@Keren Zubovsky Appreciate you sharing the additional details. The thread had tag: API Management and I thought deployment might be for API Management resource. Hence, I shared API Management related docs but that's not going to help with your current situation (since resources are different). Now I have added tags for VM and Network Interface for the appropriate team to answer your question.

1 answer

Joe Carlyle 661 Reputation points MVP

2022-08-16T16:15:19.76+00:00

Hi,

There is no delete operation that you can run explicitly.

However, you could create an empty template and deploy that in complete mode rather than incremental, this would remove that NIC for your next deployment. Obviously you would need to add the logic on your side to catch the failure and deploy the empty template - https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deployment-modes
Please sign in to rate this answer.
Keren Zubovsky 21 Reputation points

2022-08-21T06:26:09.733+00:00

@Joe Carlyle thanks for your answer.
As far as I know, a deployment with complete mode will delete/override the current state of my environment, no?
For example if I already have VM-1 and NIC-1 existing in my env (account/RG), and I am trying to create VM-2 & NIC-2 in the same env using a deployment, if the deployment fails - the empty template deployment will delete the resources of the failed deployment (VM-2 and/or NIC-2), but also VM-1 and NIC-1.

Is this correct?

Joe Carlyle 661 Reputation points MVP

2022-08-22T09:35:00.69+00:00

Correct, assuming the scope of the deployment matches the scope of the existing resources. For example a Resource Group containing VM1 and your new deployment is there. If you deploy a complete mode empty template, they will all be removed.

To use the empty template method, you would have to deploy to scope that you fully own in terms of resources, like a new empty resource group.
Sign in to comment

Share via

Delete created resources if deployment failed

1 answer