unexpected differences in what if for azure web app deployment slot

[sabbadino]

Bicep version 0.16.2 (de7fdd2b33)

Describe the bug "what if" on azure web app deployment slot report a lot of things that would be deleted (looks like default values not provided in bicep). If I run the bicep and then run "what if" again the same differences are shown again.

To Reproduce

create a RG .. deploy this bicep .. then run what if : you get many differences (Deletes mostly) for slot ..

run bicep again run "what if" again : you get again many differences (Deletes mostly) for slot ..

bicep :

param env string 
param aspnetcore_env string
param location string 
param app_plan_skuName string
param app_plan_capacity int
param app_plan_grpc_name string 
param app_grpc_name string 
param app_grpc_tag string 
param linuxFxVersion string = 'DOTNETCORE|6.0' 
// grpc Service
resource app_plan_grpc_resource 'Microsoft.Web/serverfarms@2022-03-01' = {
  name: app_plan_grpc_name
  location: location
  tags: {
    _Agency: 'MSC Italy'
    _Product: 'mymsc'
    _Scope: 'mymsc'
    env: env
    service: app_grpc_tag

  }
  properties: {
    reserved: true
  }
  sku: {
    name: app_plan_skuName
    capacity: app_plan_capacity
  }
  kind: 'linux'
}

resource app_grpc_resource 'Microsoft.Web/sites@2022-03-01' =  {
  name: app_grpc_name
  location: location
  identity: {
    type: 'SystemAssigned'
  }
  tags: {
    _Agency: 'MSC Italy'
    _Product: 'mymsc'
    _Scope: 'mymsc'
    env: env
    service: app_grpc_tag

  }
  properties: {
    enabled: true
    serverFarmId: app_plan_grpc_resource.id
    siteConfig: {
      numberOfWorkers: 1
      acrUseManagedIdentityCreds: false
      alwaysOn: true
      http20Enabled: false
      functionAppScaleLimit: 0
      minimumElasticInstanceCount: 0
      linuxFxVersion: linuxFxVersion
      ftpsState: 'Disabled'
      healthCheckPath: '/health'
    }
    scmSiteAlsoStopped: false
    clientAffinityEnabled: false
    httpsOnly: true
    keyVaultReferenceIdentity: 'SystemAssigned'
  }

}

var appSettingsGrpc = [
      {
        name: 'ASPNETCORE_ENVIRONMENT'
        value: aspnetcore_env
      }
      {
        name: 'WEBSITE_LOAD_CERTIFICATES'
        value: '*'
      }
    ]

resource app_grpc_resource_config 'Microsoft.Web/sites/config@2022-03-01' =  {
  parent: app_grpc_resource
  name: 'web'

  properties: {
    appSettings: appSettingsGrpc
    numberOfWorkers: 1
    alwaysOn: true
  }

}

resource app_grpc_resource_slot 'Microsoft.Web/sites/slots@2022-03-01' = {
  name: 'staging'
  location: location
  tags: {
    _Agency: 'MSC Italy'
    _Product: 'mymsc'
    _Scope: 'mymsc'
    env: env
    service: app_grpc_tag
  }
  parent: app_grpc_resource
  properties: {
    enabled: true
    serverFarmId: app_plan_grpc_resource.id
    siteConfig: {
      numberOfWorkers: 1
      acrUseManagedIdentityCreds: false
      alwaysOn: true
      http20Enabled: false
      functionAppScaleLimit: 0
      minimumElasticInstanceCount: 0
      linuxFxVersion: linuxFxVersion
      ftpsState: 'Disabled'
      healthCheckPath: '/health'
    }
    scmSiteAlsoStopped: false
    clientAffinityEnabled: false
    httpsOnly: true
  }
  identity: {
    type: 'SystemAssigned'
  }
}

resource app_grpc_resource_slot_config 'Microsoft.Web/sites/slots/config@2021-03-01' = {
  parent: app_grpc_resource_slot
  name: 'web'
  properties: {
    appSettings: appSettingsGrpc
    numberOfWorkers: 1
    alwaysOn: true
  }
}

[sabbadino]

here is the output of what-if : my main concerns are the differences (deletes) in the deployment slot

Resource and property changes are indicated with these symbols:

• Delete
• Create ~ Modify = Nochange

The deployment will update the following scope:

Scope: /subscriptions/d642528f-3525-4e1b-bf17-fe100458b4e1/resourceGroups/test-bicep

~ Microsoft.Web/sites/sabba-cicd-awa00-quote-grpc [2022-03-01]

• properties.siteConfig.ftpsState: "Disabled"

• properties.siteConfig.healthCheckPath: "/health"

• properties.siteConfig.localMySqlEnabled: false

• properties.siteConfig.netFrameworkVersion: "v4.6"

  ~ Microsoft.Web/sites/sabba-cicd-awa00-quote-grpc/config/web [2022-03-01]

• properties.appSettings: [ 0:

    name:  "ASPNETCORE_ENVIRONMENT"
    value: "ci-cd"
  
  1:
  
    name:  "WEBSITE_LOAD_CERTIFICATES"
    value: "*"

  ]

  ~ Microsoft.Web/sites/sabba-cicd-awa00-quote-grpc/slots/staging [2022-03-01]

• kind: "app,linux"

• properties.adminEnabled: true

• properties.clientCertEnabled: false

• properties.clientCertMode: "Required"

• properties.containerSize: 0

• properties.customDomainVerificationId: "DD8FC2000CB60AFA462A9264F912C5973C2B27FBE8E920C7CC79AA05B88FC084"

• properties.defaultHostNameScope: "Global"

• properties.deploymentId: "sabba-cicd-awa00-quote-grpc__f03e"

• properties.eligibleLogCategories: "AppServiceAppLogs,AppServiceAuditLogs,AppServiceConsoleLogs,AppServiceHTTPLogs,AppServiceIPSecAuditLogs,AppServicePlatformLogs,ScanLogs"

• properties.ftpUsername: "sabba-cicd-awa00-quote-grpcstaging\$sabba-cicd-awa00-quote-grpcstaging"

• properties.ftpsHostName: "ftps://waws-prod-am2-679.ftp.azurewebsites.windows.net/site/wwwroot"

• properties.homeStamp: "waws-prod-am2-679"

• properties.hostNameSslStates: [ 0:

    hostType:        "Standard"
    ipBasedSslState: "NotConfigured"
    name:            "sabba-cicd-awa00-quote-grpc-staging.azurewebsites.net"
    sslState:        "Disabled"
  
  1:
  
    hostType:        "Repository"
    ipBasedSslState: "NotConfigured"
    name:            "sabba-cicd-awa00-quote-grpc-staging.scm.azurewebsites.net"
    sslState:        "Disabled"

  ]

• properties.inboundIpAddress: "20.105.224.24"

• properties.keyVaultReferenceIdentity: "SystemAssigned"

• properties.kind: "app,linux"

• properties.name: "sabba-cicd-awa00-quote-grpc(staging)"

• properties.possibleInboundIpAddresses: "20.105.224.24"

• properties.redundancyMode: "None"

• properties.selfLink: "https://waws-prod-am2-679.api.azurewebsites.windows.net:454/subscriptions/d642528f-3525-4e1b-bf17-fe100458b4e1/webspaces/test-bicep-WestEuropewebspace-Linux/sites/sabba-cicd-awa00-quote-grpc"

• properties.siteDisabledReason: 0

• properties.siteProperties:

  properties: [
    0:
  
      name:  "LinuxFxVersion"
      value: "DOTNETCORE|7.0"
  
    1:
  
      name: "WindowsFxVersion"
  
  ]

• properties.sku: "Standard"

• properties.storageRecoveryDefaultState: "Running"

• properties.tags:

  _Agency:  "MSC Italy"
  _Product: "mymsc"
  _Scope:   "mymsc"
  env:      "ci-cd"
  service:  "quote-grpc"

• properties.vnetContentShareEnabled: false

• properties.vnetImagePullEnabled: false

• properties.vnetRouteAllEnabled: false

• properties.webSpace: "test-bicep-WestEuropewebspace-Linux"

• properties.siteConfig.ftpsState: "Disabled"

• properties.siteConfig.healthCheckPath: "/health"

• properties.siteConfig.localMySqlEnabled: false

• properties.siteConfig.netFrameworkVersion: "v4.6"

  ~ Microsoft.Web/sites/sabba-cicd-awa00-quote-grpc/slots/staging/config/web [2021-03-01]

• properties.antivirusScanEnabled: false

• properties.autoHealEnabled: false

• properties.customAppPoolIdentityAdminState: false

• properties.customAppPoolIdentityTenantState: false

• properties.defaultDocuments: [ 0: "Default.htm" 1: "Default.html" 2: "Default.asp" 3: "index.htm" 4: "index.html" 5: "iisstart.htm" 6: "default.aspx" 7: "index.php" 8: "hostingstart.html" ]

• properties.detailedErrorLoggingEnabled: false

• properties.elasticWebAppScaleLimit: 0

• properties.fileChangeAuditEnabled: false

• properties.ftpsState: "Disabled"

• properties.healthCheckPath: "/health"

• properties.http20ProxyFlag: 0

• properties.httpLoggingEnabled: false

• properties.ipSecurityRestrictions: [ 0:

    action:      "Allow"
    description: "Allow all access"
    ipAddress:   "Any"
    name:        "Allow all"
    priority:    2147483647

  ]

• properties.linuxFxVersion: "DOTNETCORE|7.0"

• properties.loadBalancing: "LeastRequests"

• properties.logsDirectorySizeLimit: 35

• properties.managedPipelineMode: "Integrated"

• properties.managedServiceIdentityId: 697

• properties.minTlsVersion: "1.2"

• properties.minimumElasticInstanceCount: 0

• properties.preWarmedInstanceCount: 0

• properties.publishingUsername: "$sabba-cicd-awa00-quote-grpc__staging"

• properties.remoteDebuggingEnabled: false

• properties.requestTracingEnabled: false

• properties.scmIpSecurityRestrictions: [ 0:

    action:      "Allow"
    description: "Allow all access"
    ipAddress:   "Any"
    name:        "Allow all"
    priority:    2147483647

  ]

• properties.scmIpSecurityRestrictionsUseMain: false

• properties.scmMinTlsVersion: "1.2"

• properties.scmType: "None"

• properties.siteAuthEnabled: false

• properties.siteAuthSettings:

  isAadAutoProvisioned: false

• properties.storageType: "StorageVolume"

• properties.use32BitWorkerProcess: true

• properties.virtualApplications: [ 0:

    physicalPath:   "site\wwwroot"
    preloadEnabled: true
    virtualPath:    "/"

  ]

• properties.vnetRouteAllEnabled: false

• properties.webSocketsEnabled: false

• properties.winAuthAdminState: 0

• properties.winAuthTenantState: 0

• properties.appSettings: [ 0:

    name:  "ASPNETCORE_ENVIRONMENT"
    value: "ci-cd"
  
  1:
  
    name:  "WEBSITE_LOAD_CERTIFICATES"
    value: "*"

  ] ~ properties.http20Enabled: false => true ~ properties.netFrameworkVersion: "v4.0" => "v4.6"

  = Microsoft.Web/serverfarms/sabba-cicd-aap00-quote-grpc [2022-03-01]

Resource changes: 4 to modify, 1 no change.