sinbai
commented
2 years ago @pinaki-accenture thanks for opening this issue here. Unfortunately, I could not reproduce this issue with the following tf configuration and steps. Could you reproduce with it? Could you provide the full tf configuration and reproduce steps to help reproduce and troubleshoot?
Terraform and AzureRM Provider Version:
Step1: Create resource azurerm_backup_container_storage_account with the following tf configuration.
terraform {
required_providers {
azurerm = {
source = "hashicorp/azurerm"
version = "3.0.1"
}
}
}
provider "azurerm" {
features {
}
}
resource "azurerm_resource_group" "test" {
name = "RG-example"
location = "eastus"
}
resource "azurerm_recovery_services_vault" "testvlt" {
name = "vault-example"
location = azurerm_resource_group.test.location
resource_group_name = azurerm_resource_group.test.name
sku = "Standard"
soft_delete_enabled = true
}
resource "azurerm_storage_account" "test" {
name = "unlikely23exst"
resource_group_name = azurerm_resource_group.test.name
location = azurerm_resource_group.test.location
account_tier = "Standard"
account_replication_type = "LRS"
}
resource "azurerm_storage_share" "test" {
name = "ss-example"
storage_account_name = "${azurerm_storage_account.test.name}"
quota = 1
metadata = {}
lifecycle {
ignore_changes = [metadata] // Ignore changes Azure Backup makes to the metadata
}
}
resource "azurerm_backup_container_storage_account" "test" {
resource_group_name = azurerm_resource_group.test.name
recovery_vault_name = azurerm_recovery_services_vault.testvlt.name
storage_account_id = azurerm_storage_account.test.id
depends_on = [
azurerm_storage_share.test,
]
}Step2: Run Terraform Destroy => Everything works smoothly.
Actual: All resources could be destroyed .
Pinaki-1
gyuvaraj10
madheaduk
Netkracker
Is there an existing issue for this?
Community Note
Terraform Version
1.2.3
AzureRM Provider Version
3.0.1
Affected Resource(s)/Data Source(s)
azurerm_backup_container_storage_account
Terraform Configuration Files
Debug Output/Panic Output
Expected Behaviour
Terraform should be able to destroy all dependent components(like RBAC, and private endpoints) and finally be able to delete the storage account. Because post destroying "azurerm_backup_container_storage_account", resource lock was also got deleted.
Actual Behaviour
Post destruction of "azurerm_backup_container_storage_account" and file shares terraform unable to perform :
reason - Service returned an error. Status=409 Code="ScopeLocked"
Steps to Reproduce
No response
Important Factoids
No response
References
https://github.com/hashicorp/terraform-provider-azurerm/issues/5025