Deleting Private endpoint resulting an error

Question

Deleting Private endpoint resulting an error

Boubnane, Hamza 0

Hello,

I've created an ACA env, a Private dnz Zone (with virtual network link) and a private endpoint for the ACA env, I've been trying to destroy the resources with terraform and it kept saying 'still destroying' for an hour and gets timeouted, and I've tried to do it with a AZ CLI and I get :

 az network private-endpoint delete --name aca-environments-pe --resource-group rg-container-apps
(InternalServerError) An error occurred.
Code: InternalServerError
Message: An error occurred.
Inner error: "Source: Nrp.Frontend.ClientCommon. Microsoft.WindowsAzure.Networking.Nrp.Frontend.Common.OperationException: Unexpected response from https://management.azure.com/subscriptions/f75c69e9-2ee8-4632-bdc1-fc29f62ce9d7/providers/Microsoft.App/locations/westeurope/operationResults/cHJpdmF0ZUVuZHBvaW50Q29ubmVjdGlvblByb3hpZXM6NTJiZjdiYjAtZTM5ZC00ODk3LWE2YTgtYzJmZTI5OWUxYTA2?api-version=2023-11-02-preview&azureAsyncOperation=true&t=638821597593078935&c=MIIHpTCCBo2gAwIBAgITfwV1hryhGERublzpL39_8VMdMER9txMHAp_aFpMIFqdJ5CQXX5I6xCWJ3Nu-Yp4w&h=1ibXnVjSnbY44L7gNPTX2cw09otpDsuJl0jvDp9Y6jE. Content is empty. Expecting AzureAsyncOperation\\r\\nCode: \\r\\nInnerError: \\r\\n   at Microsoft.WindowsAzure.Networking.Nrp.Frontend.Client.Common.AsyncOperationController.

Praveen Bandaru 3,165 Reputation points Microsoft External Staff Moderator

2025-05-06T21:49:02.2433333+00:00
Hello Boubnane, HamzaI understand that you are trying to delete the Private Endpoint but are unable to perform the action.

If the private endpoint provisioning state shows "Failed", it means something went wrong during deletion.

To fix this, you’ll need to change the state to "Succeeded". You can try running the following Get-Set command to update the status:

Get-AzPrivateEndpoint -Name "your_resource_name" -ResourceGroupName "your_resource_group_name" | Set-AzPrivateEndpoint

Check the public document: https://learn.microsoft.com/en-us/azure/networking/troubleshoot-failed-state#microsoftnetworkprivateendpoints

Once it reaches the succeeded state, you can perform a delete operation.

Make sure there are no other resources or dependencies linked to the private endpoint that might be causing the deletion to hang.

You might also want to check the activity logs in your Azure subscription for details about any failed operations related to the private endpoint.

You can also try using the Azure portal to see if you encounter the same error.

Note: Could you please let me know if you are using a Managed Private Endpoint or a Normal Private Endpoint.

Hope the above answer helps! Please let us know do you have any further queries.

Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members
Boubnane, Hamza 0 Reputation points

2025-05-06T23:02:41.18+00:00

Hello,

I can still manually delete it from the portal but the problem is my CI/CD is always failing because it cannot delete the private endpoint, and it's a Normal Private Endpoint.
There's no dependencies since the other private endpoint can be deleted through az cli & terraform but not the ACA's private endpoint.

Would it be possible to contact the backend team to check if there's a fix to this ? I'm unable to continue my work with this issue.

Thank you
Durga Reshma Malthi 115 Reputation points Microsoft External Staff Moderator

2025-05-07T13:35:15.0333333+00:00
Hi Boubnane, Hamza

Could you please follow the below steps to resolve this issue:

In Terraform, include the force deletion option for the private endpoint: Example: resource "azurerm_private_endpoint" "aca" {
name                = "aca-environments"
resource_group_name = "rg-container-apps"
location            = "eastus"
force_delete        = true # Force deletion
} Then execute: terraform apply -destroy terraform destroy -target=<azurerm_private_endpoint.aca> This will bypass the failed provisioning state and ensure deletion.

If Terraform still fails to delete the resource, manually remove it from Terraform's state: terraform state rm <azurerm_private_endpoint.aca>

Azure might still recognize the private endpoint as "in use." Try manually removing its connection before attempting deletion: az network private-endpoint-connection delete --id <PRIVATE_ENDPOINT_CONNECTION_ID>
After removing connections, attempt: az network private-endpoint delete --name <aca-environments> --resource-group <rg-container-apps>

Please make sure there are no resource locks on the Private Endpoint or the resource group that could prevent deletion. You can verify locks in the Azure Portal under the "Locks" section of the resource or resource group.

Hope this helps!

Please Let me know if you have any queries.
Boubnane, Hamza 0 Reputation points

2025-05-07T14:48:35.1433333+00:00

Hello,
When I try to add the "force_delete" I get this :

An argument named "force_delete" is not expected here.

Terraform destroy at first attempt cannot delete it no matter what, but once I rerun the terraform destroy It can delete it, but this behaviour will still cause my pipeline to fail everytime.
even with AZ CLI I cannot delete it as I've sent the result of the command

I'm trying to contact the backend team from azure but once I'm in the 'Additional details' tab in support request it says : "Your support plan includes prioritized responses by support engineers on Microsoft Q&A." and i can't go next to create the ticket.
Isn't there an email that I can send this issue to ?

Thank you

Your answer

Praveen Bandaru 3,165 Reputation points Microsoft External Staff Moderator

2025-05-06T21:49:02.2433333+00:00

Hello Boubnane, HamzaI understand that you are trying to delete the Private Endpoint but are unable to perform the action.

If the private endpoint provisioning state shows "Failed", it means something went wrong during deletion.

To fix this, you’ll need to change the state to "Succeeded". You can try running the following Get-Set command to update the status:

Get-AzPrivateEndpoint -Name "your_resource_name" -ResourceGroupName "your_resource_group_name" | Set-AzPrivateEndpoint

Check the public document: https://learn.microsoft.com/en-us/azure/networking/troubleshoot-failed-state#microsoftnetworkprivateendpoints

Once it reaches the succeeded state, you can perform a delete operation.

Make sure there are no other resources or dependencies linked to the private endpoint that might be causing the deletion to hang.

You might also want to check the activity logs in your Azure subscription for details about any failed operations related to the private endpoint.

You can also try using the Azure portal to see if you encounter the same error.

Note: Could you please let me know if you are using a Managed Private Endpoint or a Normal Private Endpoint.

Hope the above answer helps! Please let us know do you have any further queries.

Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members
Boubnane, Hamza 0 Reputation points

2025-05-06T23:02:41.18+00:00

Hello,

I can still manually delete it from the portal but the problem is my CI/CD is always failing because it cannot delete the private endpoint, and it's a Normal Private Endpoint.
There's no dependencies since the other private endpoint can be deleted through az cli & terraform but not the ACA's private endpoint.

Would it be possible to contact the backend team to check if there's a fix to this ? I'm unable to continue my work with this issue.

Thank you
Durga Reshma Malthi 115 Reputation points Microsoft External Staff Moderator

2025-05-07T13:35:15.0333333+00:00

Hi Boubnane, Hamza

Could you please follow the below steps to resolve this issue:

In Terraform, include the force deletion option for the private endpoint: Example: resource "azurerm_private_endpoint" "aca" {
name = "aca-environments"
resource_group_name = "rg-container-apps"
location = "eastus"
force_delete = true # Force deletion
} Then execute: terraform apply -destroy terraform destroy -target=<azurerm_private_endpoint.aca> This will bypass the failed provisioning state and ensure deletion.

If Terraform still fails to delete the resource, manually remove it from Terraform's state: terraform state rm <azurerm_private_endpoint.aca>

Azure might still recognize the private endpoint as "in use." Try manually removing its connection before attempting deletion: az network private-endpoint-connection delete --id <PRIVATE_ENDPOINT_CONNECTION_ID>
After removing connections, attempt: az network private-endpoint delete --name <aca-environments> --resource-group <rg-container-apps>

Please make sure there are no resource locks on the Private Endpoint or the resource group that could prevent deletion. You can verify locks in the Azure Portal under the "Locks" section of the resource or resource group.

Hope this helps!

Please Let me know if you have any queries.
Boubnane, Hamza 0 Reputation points

2025-05-07T14:48:35.1433333+00:00

Hello,
When I try to add the "force_delete" I get this :

An argument named "force_delete" is not expected here.

Terraform destroy at first attempt cannot delete it no matter what, but once I rerun the terraform destroy It can delete it, but this behaviour will still cause my pipeline to fail everytime.
even with AZ CLI I cannot delete it as I've sent the result of the command

I'm trying to contact the backend team from azure but once I'm in the 'Additional details' tab in support request it says : "Your support plan includes prioritized responses by support engineers on Microsoft Q&A." and i can't go next to create the ticket.
Isn't there an email that I can send this issue to ?

Thank you

Share via

Deleting Private endpoint resulting an error

Your answer