ms-zhenhua
commented
2 years ago Hi @timwebster9, I tried to reproduce this issue with the following configuration for dozens of times, but the issue never happened. How often did you meet this issue ? Could you provide an executable configuration which can steadily reproduce such issue ? Then I can do more investigation on it. Thanks.
resource "azurerm_resource_group" "test" {
name = "demo-rg"
location = "westus2"
}
resource "azurerm_virtual_network" "test" {
name = "acctest-vnet-demo"
location = azurerm_resource_group.test.location
resource_group_name = azurerm_resource_group.test.name
address_space = ["10.0.0.0/16"]
}
resource "azurerm_subnet" "public" {
name = "acctest-sn-public-demo"
resource_group_name = azurerm_resource_group.test.name
virtual_network_name = azurerm_virtual_network.test.name
address_prefixes = ["10.0.1.0/24"]
delegation {
name = "acctest"
service_delegation {
name = "Microsoft.Databricks/workspaces"
actions = [
"Microsoft.Network/virtualNetworks/subnets/join/action",
"Microsoft.Network/virtualNetworks/subnets/prepareNetworkPolicies/action",
"Microsoft.Network/virtualNetworks/subnets/unprepareNetworkPolicies/action",
]
}
}
}
resource "azurerm_subnet" "private" {
name = "acctest-sn-private-demo"
resource_group_name = azurerm_resource_group.test.name
virtual_network_name = azurerm_virtual_network.test.name
address_prefixes = ["10.0.2.0/24"]
delegation {
name = "acctest"
service_delegation {
name = "Microsoft.Databricks/workspaces"
actions = [
"Microsoft.Network/virtualNetworks/subnets/join/action",
"Microsoft.Network/virtualNetworks/subnets/prepareNetworkPolicies/action",
"Microsoft.Network/virtualNetworks/subnets/unprepareNetworkPolicies/action",
]
}
}
}
resource "azurerm_subnet" "privatelink" {
name = "acctest-snpl-demo"
resource_group_name = azurerm_resource_group.test.name
virtual_network_name = azurerm_virtual_network.test.name
address_prefixes = ["10.0.3.0/24"]
enforce_private_link_endpoint_network_policies = true
}
resource "azurerm_network_security_group" "nsg" {
name = "acctest-nsg-demo"
location = azurerm_resource_group.test.location
resource_group_name = azurerm_resource_group.test.name
}
resource "azurerm_subnet_network_security_group_association" "public" {
subnet_id = azurerm_subnet.public.id
network_security_group_id = azurerm_network_security_group.nsg.id
}
resource "azurerm_subnet_network_security_group_association" "private" {
subnet_id = azurerm_subnet.private.id
network_security_group_id = azurerm_network_security_group.nsg.id
}
resource "azurerm_databricks_workspace" "test" {
name = "acctestDBW-demo"
resource_group_name = azurerm_resource_group.test.name
location = azurerm_resource_group.test.location
sku = "premium"
managed_resource_group_name = "acctestRG-DBW-demo-managed"
public_network_access_enabled = false
network_security_group_rules_required = "NoAzureDatabricksRules"
custom_parameters {
no_public_ip = true
public_subnet_name = azurerm_subnet.public.name
private_subnet_name = azurerm_subnet.private.name
virtual_network_id = azurerm_virtual_network.test.id
public_subnet_network_security_group_association_id = azurerm_subnet_network_security_group_association.public.id
private_subnet_network_security_group_association_id = azurerm_subnet_network_security_group_association.private.id
}
tags = {
Environment = "Production"
Pricing = "Premium"
}
}
resource "azurerm_private_endpoint" "databricks" {
name = "acctest-endpoint-demo"
location = azurerm_resource_group.test.location
resource_group_name = azurerm_resource_group.test.name
subnet_id = azurerm_subnet.privatelink.id
private_service_connection {
name = "acctest-psc-demo"
is_manual_connection = false
private_connection_resource_id = azurerm_databricks_workspace.test.id
subresource_names = ["databricks_ui_api"]
}
}
timwebster9
joshua-hancox
theumannsuncor
duncanaf
Community Note
Terraform (and AzureRM Provider) Version
Affected Resource(s)
azurerm_private_endpointTerraform Configuration Files
I'm not certain this matters - it seems to usually be the private endpoint it hangs on, but in the log snippets below you'll see hangs on different types of resources.
Debug Output
I have a complete trace file, but cannot include here for privacy reasons. Below are snippets of what it's stuck on.
NOTE: these are from two different builds. In the first one the delay seems to be on a databricks workspace, and the second one seems to be on a private endpoint.
without trace (note the 5 minute delay between log messages):
with trace (this continues for exactly 5 minutes):
Panic Output
n/a
Expected Behaviour
It shouldn't hang
Actual Behaviour
It hangs at this point for pretty much exactly 5 minutes. After the 5 minute delay, it continues on successfully.
Steps to Reproduce
run 'terraform destroy` on the configuration
Important Factoids
n/a
References
n/a