From ac2e89e9a6b71095140e75297eafd9be1e0882d2 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 20 Nov 2025 22:03:52 +0000 Subject: [PATCH 01/10] Initial plan From c32a87ac457f89058b49434d057dfed6dd773d2d Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 20 Nov 2025 22:12:06 +0000 Subject: [PATCH 02/10] Fix workspace deletion failures by adding create_before_destroy to AMPLS private endpoints Co-authored-by: marrobi <17089773+marrobi@users.noreply.github.com> --- CHANGELOG.md | 1 + core/terraform/azure-monitor/azure-monitor.tf | 5 ++++- .../workspaces/base/terraform/azure-monitor/azure-monitor.tf | 5 ++++- 3 files changed, 9 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 96b0c2f8ee..95abc240d0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,7 @@ ENHANCEMENTS: BUG FIXES: * Fix circular dependancy in base workspace. ([#4756](https://github.com/microsoft/AzureTRE/pull/4756)) * Replaced deprecated `datetime.utcnow()` with `datetime.now(datetime.UTC)` in the API and airlock processor. ([#4743](https://github.com/microsoft/AzureTRE/issues/4743)) +* Fix workspace deletion failures due to AnotherOperationInProgress errors on AMPLS private endpoint ([#3194](https://github.com/microsoft/AzureTRE/issues/3194)) COMPONENTS: diff --git a/core/terraform/azure-monitor/azure-monitor.tf b/core/terraform/azure-monitor/azure-monitor.tf index 81f5c3c18d..4a28da886a 100644 --- a/core/terraform/azure-monitor/azure-monitor.tf +++ b/core/terraform/azure-monitor/azure-monitor.tf @@ -117,7 +117,10 @@ resource "azurerm_private_endpoint" "azure_monitor_private_endpoint" { subnet_id = var.shared_subnet_id tags = var.tre_core_tags - lifecycle { ignore_changes = [tags] } + lifecycle { + create_before_destroy = true + ignore_changes = [tags] + } depends_on = [ azurerm_monitor_private_link_scoped_service.ampls_app_insights, ] diff --git a/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf b/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf index 08822baa80..30972aea34 100644 --- a/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf +++ b/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf @@ -171,7 +171,10 @@ resource "azurerm_private_endpoint" "azure_monitor_private_endpoint" { subnet_id = var.workspace_subnet_id tags = var.tre_workspace_tags - lifecycle { ignore_changes = [tags] } + lifecycle { + create_before_destroy = true + ignore_changes = [tags] + } private_service_connection { private_connection_resource_id = azapi_resource.ampls_workspace.id From 5d9bb7ddcd3ccce27fabcd570ea6c1e8967c4ca0 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 21 Nov 2025 12:14:14 +0000 Subject: [PATCH 03/10] Add create_before_destroy to Azure Monitor DNS zones and VNet links to fix deletion ordering Co-authored-by: marrobi <17089773+marrobi@users.noreply.github.com> --- .../base/terraform/network/dns_zones.tf | 40 +++++++++++++++---- 1 file changed, 32 insertions(+), 8 deletions(-) diff --git a/templates/workspaces/base/terraform/network/dns_zones.tf b/templates/workspaces/base/terraform/network/dns_zones.tf index cdb6e8bbfe..1d8594c45c 100644 --- a/templates/workspaces/base/terraform/network/dns_zones.tf +++ b/templates/workspaces/base/terraform/network/dns_zones.tf @@ -16,7 +16,10 @@ resource "azurerm_private_dns_zone" "azure_monitor" { resource_group_name = var.ws_resource_group_name tags = var.tre_workspace_tags - lifecycle { ignore_changes = [tags] } + lifecycle { + create_before_destroy = true + ignore_changes = [tags] + } } resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor" { @@ -27,7 +30,10 @@ resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor" { registration_enabled = false tags = var.tre_workspace_tags - lifecycle { ignore_changes = [tags] } + lifecycle { + create_before_destroy = true + ignore_changes = [tags] + } } resource "azurerm_private_dns_zone" "azure_monitor_oms_opinsights" { @@ -35,7 +41,10 @@ resource "azurerm_private_dns_zone" "azure_monitor_oms_opinsights" { resource_group_name = var.ws_resource_group_name tags = var.tre_workspace_tags - lifecycle { ignore_changes = [tags] } + lifecycle { + create_before_destroy = true + ignore_changes = [tags] + } } resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_oms_opinsights" { @@ -46,14 +55,20 @@ resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_oms_opin registration_enabled = false tags = var.tre_workspace_tags - lifecycle { ignore_changes = [tags] } + lifecycle { + create_before_destroy = true + ignore_changes = [tags] + } } resource "azurerm_private_dns_zone" "azure_monitor_ods_opinsights" { name = module.terraform_azurerm_environment_configuration.private_links["privatelink.ods.opinsights.azure.com"] resource_group_name = var.ws_resource_group_name tags = var.tre_workspace_tags - lifecycle { ignore_changes = [tags] } + lifecycle { + create_before_destroy = true + ignore_changes = [tags] + } } resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_ods_opinsights" { @@ -63,14 +78,20 @@ resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_ods_opin private_dns_zone_name = azurerm_private_dns_zone.azure_monitor_ods_opinsights.name registration_enabled = false tags = var.tre_workspace_tags - lifecycle { ignore_changes = [tags] } + lifecycle { + create_before_destroy = true + ignore_changes = [tags] + } } resource "azurerm_private_dns_zone" "azure_monitor_agentsvc" { name = module.terraform_azurerm_environment_configuration.private_links["privatelink.agentsvc.azure-automation.net"] resource_group_name = var.ws_resource_group_name tags = var.tre_workspace_tags - lifecycle { ignore_changes = [tags] } + lifecycle { + create_before_destroy = true + ignore_changes = [tags] + } } resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_agentsvc" { @@ -80,5 +101,8 @@ resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_agentsvc private_dns_zone_name = azurerm_private_dns_zone.azure_monitor_agentsvc.name registration_enabled = false tags = var.tre_workspace_tags - lifecycle { ignore_changes = [tags] } + lifecycle { + create_before_destroy = true + ignore_changes = [tags] + } } From d66e33f1e8ece0987626a716e6a8cb9321682619 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 21 Nov 2025 12:16:25 +0000 Subject: [PATCH 04/10] Fix lifecycle block formatting for consistency Co-authored-by: marrobi <17089773+marrobi@users.noreply.github.com> --- templates/workspaces/base/terraform/network/dns_zones.tf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/templates/workspaces/base/terraform/network/dns_zones.tf b/templates/workspaces/base/terraform/network/dns_zones.tf index 1d8594c45c..02128957f1 100644 --- a/templates/workspaces/base/terraform/network/dns_zones.tf +++ b/templates/workspaces/base/terraform/network/dns_zones.tf @@ -65,6 +65,7 @@ resource "azurerm_private_dns_zone" "azure_monitor_ods_opinsights" { name = module.terraform_azurerm_environment_configuration.private_links["privatelink.ods.opinsights.azure.com"] resource_group_name = var.ws_resource_group_name tags = var.tre_workspace_tags + lifecycle { create_before_destroy = true ignore_changes = [tags] @@ -78,6 +79,7 @@ resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_ods_opin private_dns_zone_name = azurerm_private_dns_zone.azure_monitor_ods_opinsights.name registration_enabled = false tags = var.tre_workspace_tags + lifecycle { create_before_destroy = true ignore_changes = [tags] @@ -88,6 +90,7 @@ resource "azurerm_private_dns_zone" "azure_monitor_agentsvc" { name = module.terraform_azurerm_environment_configuration.private_links["privatelink.agentsvc.azure-automation.net"] resource_group_name = var.ws_resource_group_name tags = var.tre_workspace_tags + lifecycle { create_before_destroy = true ignore_changes = [tags] @@ -101,6 +104,7 @@ resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_agentsvc private_dns_zone_name = azurerm_private_dns_zone.azure_monitor_agentsvc.name registration_enabled = false tags = var.tre_workspace_tags + lifecycle { create_before_destroy = true ignore_changes = [tags] From 38788f538f02fc1d97827c8553ca8be0832111c6 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 21 Nov 2025 16:35:36 +0000 Subject: [PATCH 05/10] Bump workspace base template to 2.7.2 and core to 0.16.11 for bug fix Co-authored-by: marrobi <17089773+marrobi@users.noreply.github.com> --- CHANGELOG.md | 2 ++ core/version.txt | 2 +- templates/workspaces/base/porter.yaml | 2 +- 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f00c3864bd..6be98b2ec1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -13,6 +13,8 @@ BUG FIXES: * Fix workspace deletion failures due to AnotherOperationInProgress errors on AMPLS private endpoint ([#3194](https://github.com/microsoft/AzureTRE/issues/3194)) COMPONENTS: +* Bump workspace base template version to 2.7.2 ([#3194](https://github.com/microsoft/AzureTRE/issues/3194)) +* Bump core version to 0.16.11 ([#3194](https://github.com/microsoft/AzureTRE/issues/3194)) ## 0.26.0 (October 12, 2025) **BREAKING CHANGES** diff --git a/core/version.txt b/core/version.txt index 690e6889e2..bac41ffe7b 100644 --- a/core/version.txt +++ b/core/version.txt @@ -1 +1 @@ -__version__ = "0.16.10" +__version__ = "0.16.11" diff --git a/templates/workspaces/base/porter.yaml b/templates/workspaces/base/porter.yaml index 9fd970c1e6..bcf5885b95 100644 --- a/templates/workspaces/base/porter.yaml +++ b/templates/workspaces/base/porter.yaml @@ -1,7 +1,7 @@ --- schemaVersion: 1.0.0 name: tre-workspace-base -version: 2.7.1 +version: 2.7.2 description: "A base Azure TRE workspace" dockerfile: Dockerfile.tmpl registry: azuretre From 6a2bf725d17a83b2827524af7089740c124948f9 Mon Sep 17 00:00:00 2001 From: Marcus Robinson Date: Fri, 21 Nov 2025 16:38:29 +0000 Subject: [PATCH 06/10] revert core changes --- core/terraform/azure-monitor/azure-monitor.tf | 5 +---- core/version.txt | 2 +- 2 files changed, 2 insertions(+), 5 deletions(-) diff --git a/core/terraform/azure-monitor/azure-monitor.tf b/core/terraform/azure-monitor/azure-monitor.tf index 4a28da886a..81f5c3c18d 100644 --- a/core/terraform/azure-monitor/azure-monitor.tf +++ b/core/terraform/azure-monitor/azure-monitor.tf @@ -117,10 +117,7 @@ resource "azurerm_private_endpoint" "azure_monitor_private_endpoint" { subnet_id = var.shared_subnet_id tags = var.tre_core_tags - lifecycle { - create_before_destroy = true - ignore_changes = [tags] - } + lifecycle { ignore_changes = [tags] } depends_on = [ azurerm_monitor_private_link_scoped_service.ampls_app_insights, ] diff --git a/core/version.txt b/core/version.txt index bac41ffe7b..690e6889e2 100644 --- a/core/version.txt +++ b/core/version.txt @@ -1 +1 @@ -__version__ = "0.16.11" +__version__ = "0.16.10" From 4f167eff82ed6ec2a98cbd895dbaac291803cb1d Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 21 Nov 2025 23:11:22 +0000 Subject: [PATCH 07/10] Remove core version bump from CHANGELOG since core changes were reverted Co-authored-by: marrobi <17089773+marrobi@users.noreply.github.com> --- CHANGELOG.md | 1 - 1 file changed, 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6be98b2ec1..e1dc3f71ae 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,7 +14,6 @@ BUG FIXES: COMPONENTS: * Bump workspace base template version to 2.7.2 ([#3194](https://github.com/microsoft/AzureTRE/issues/3194)) -* Bump core version to 0.16.11 ([#3194](https://github.com/microsoft/AzureTRE/issues/3194)) ## 0.26.0 (October 12, 2025) **BREAKING CHANGES** From f772a1374d552efb5738179cb1213701af4c214f Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 21 Nov 2025 23:20:36 +0000 Subject: [PATCH 08/10] Extract private_dns_zone_group into separate resource to fix AnotherOperationInProgress errors Co-authored-by: marrobi <17089773+marrobi@users.noreply.github.com> --- .../terraform/azure-monitor/azure-monitor.tf | 46 ++++++++++++++----- 1 file changed, 35 insertions(+), 11 deletions(-) diff --git a/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf b/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf index 30972aea34..787b784ab1 100644 --- a/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf +++ b/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf @@ -183,20 +183,44 @@ resource "azurerm_private_endpoint" "azure_monitor_private_endpoint" { is_manual_connection = false } - private_dns_zone_group { - name = "azure-monitor-private-dns-zone-group" - - private_dns_zone_ids = [ - var.azure_monitor_dns_zone_id, - var.azure_monitor_oms_opinsights_dns_zone_id, - var.azure_monitor_ods_opinsights_dns_zone_id, - var.azure_monitor_agentsvc_dns_zone_id, - var.blob_core_dns_zone_id, - ] + depends_on = [ + azurerm_monitor_private_link_scoped_service.ampls_app_insights, + ] +} + +# Separate private_dns_zone_group resource to avoid AnotherOperationInProgress errors +# See: https://github.com/hashicorp/terraform-provider-azurerm/issues/28715 +resource "azurerm_private_endpoint_private_dns_zone_group" "azure_monitor_private_dns_zone_group" { + name = "azure-monitor-private-dns-zone-group" + private_endpoint_id = azurerm_private_endpoint.azure_monitor_private_endpoint.id + + private_dns_zone_config { + name = "privatelink-monitor-azure-com" + private_dns_zone_ids = [var.azure_monitor_dns_zone_id] + } + + private_dns_zone_config { + name = "privatelink-oms-opinsights-azure-com" + private_dns_zone_ids = [var.azure_monitor_oms_opinsights_dns_zone_id] + } + + private_dns_zone_config { + name = "privatelink-ods-opinsights-azure-com" + private_dns_zone_ids = [var.azure_monitor_ods_opinsights_dns_zone_id] + } + + private_dns_zone_config { + name = "privatelink-agentsvc-azure-automation-net" + private_dns_zone_ids = [var.azure_monitor_agentsvc_dns_zone_id] + } + + private_dns_zone_config { + name = "privatelink-blob-core-windows-net" + private_dns_zone_ids = [var.blob_core_dns_zone_id] } depends_on = [ - azurerm_monitor_private_link_scoped_service.ampls_app_insights, + azurerm_private_endpoint.azure_monitor_private_endpoint, ] } From 21caa6e59335d8ac838aba85e7f9cb110d1fbaac Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sat, 22 Nov 2025 12:55:06 +0000 Subject: [PATCH 09/10] Revert separate DNS zone group resource - use inline with enhanced dependencies Co-authored-by: marrobi <17089773+marrobi@users.noreply.github.com> --- .../terraform/azure-monitor/azure-monitor.tf | 47 +++++-------------- 1 file changed, 12 insertions(+), 35 deletions(-) diff --git a/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf b/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf index 787b784ab1..0aed0bfa07 100644 --- a/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf +++ b/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf @@ -183,44 +183,21 @@ resource "azurerm_private_endpoint" "azure_monitor_private_endpoint" { is_manual_connection = false } - depends_on = [ - azurerm_monitor_private_link_scoped_service.ampls_app_insights, - ] -} - -# Separate private_dns_zone_group resource to avoid AnotherOperationInProgress errors -# See: https://github.com/hashicorp/terraform-provider-azurerm/issues/28715 -resource "azurerm_private_endpoint_private_dns_zone_group" "azure_monitor_private_dns_zone_group" { - name = "azure-monitor-private-dns-zone-group" - private_endpoint_id = azurerm_private_endpoint.azure_monitor_private_endpoint.id - - private_dns_zone_config { - name = "privatelink-monitor-azure-com" - private_dns_zone_ids = [var.azure_monitor_dns_zone_id] - } - - private_dns_zone_config { - name = "privatelink-oms-opinsights-azure-com" - private_dns_zone_ids = [var.azure_monitor_oms_opinsights_dns_zone_id] - } - - private_dns_zone_config { - name = "privatelink-ods-opinsights-azure-com" - private_dns_zone_ids = [var.azure_monitor_ods_opinsights_dns_zone_id] - } - - private_dns_zone_config { - name = "privatelink-agentsvc-azure-automation-net" - private_dns_zone_ids = [var.azure_monitor_agentsvc_dns_zone_id] - } - - private_dns_zone_config { - name = "privatelink-blob-core-windows-net" - private_dns_zone_ids = [var.blob_core_dns_zone_id] + private_dns_zone_group { + name = "azure-monitor-private-dns-zone-group" + + private_dns_zone_ids = [ + var.azure_monitor_dns_zone_id, + var.azure_monitor_oms_opinsights_dns_zone_id, + var.azure_monitor_ods_opinsights_dns_zone_id, + var.azure_monitor_agentsvc_dns_zone_id, + var.blob_core_dns_zone_id, + ] } depends_on = [ - azurerm_private_endpoint.azure_monitor_private_endpoint, + azurerm_monitor_private_link_scoped_service.ampls_app_insights, + azurerm_monitor_private_link_scoped_service.ampls_log_anaytics, ] } From 50d36ae58b55fbfb1cd4b596ec32c582a27a5a48 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 26 Nov 2025 19:47:07 +0000 Subject: [PATCH 10/10] Remove create_before_destroy - keep only enhanced depends_on for testing Co-authored-by: marrobi <17089773+marrobi@users.noreply.github.com> --- .../terraform/azure-monitor/azure-monitor.tf | 5 +-- .../base/terraform/network/dns_zones.tf | 40 ++++--------------- 2 files changed, 9 insertions(+), 36 deletions(-) diff --git a/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf b/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf index 0aed0bfa07..a9b1580245 100644 --- a/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf +++ b/templates/workspaces/base/terraform/azure-monitor/azure-monitor.tf @@ -171,10 +171,7 @@ resource "azurerm_private_endpoint" "azure_monitor_private_endpoint" { subnet_id = var.workspace_subnet_id tags = var.tre_workspace_tags - lifecycle { - create_before_destroy = true - ignore_changes = [tags] - } + lifecycle { ignore_changes = [tags] } private_service_connection { private_connection_resource_id = azapi_resource.ampls_workspace.id diff --git a/templates/workspaces/base/terraform/network/dns_zones.tf b/templates/workspaces/base/terraform/network/dns_zones.tf index 02128957f1..dff235f80a 100644 --- a/templates/workspaces/base/terraform/network/dns_zones.tf +++ b/templates/workspaces/base/terraform/network/dns_zones.tf @@ -16,10 +16,7 @@ resource "azurerm_private_dns_zone" "azure_monitor" { resource_group_name = var.ws_resource_group_name tags = var.tre_workspace_tags - lifecycle { - create_before_destroy = true - ignore_changes = [tags] - } + lifecycle { ignore_changes = [tags] } } resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor" { @@ -30,10 +27,7 @@ resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor" { registration_enabled = false tags = var.tre_workspace_tags - lifecycle { - create_before_destroy = true - ignore_changes = [tags] - } + lifecycle { ignore_changes = [tags] } } resource "azurerm_private_dns_zone" "azure_monitor_oms_opinsights" { @@ -41,10 +35,7 @@ resource "azurerm_private_dns_zone" "azure_monitor_oms_opinsights" { resource_group_name = var.ws_resource_group_name tags = var.tre_workspace_tags - lifecycle { - create_before_destroy = true - ignore_changes = [tags] - } + lifecycle { ignore_changes = [tags] } } resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_oms_opinsights" { @@ -55,10 +46,7 @@ resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_oms_opin registration_enabled = false tags = var.tre_workspace_tags - lifecycle { - create_before_destroy = true - ignore_changes = [tags] - } + lifecycle { ignore_changes = [tags] } } resource "azurerm_private_dns_zone" "azure_monitor_ods_opinsights" { @@ -66,10 +54,7 @@ resource "azurerm_private_dns_zone" "azure_monitor_ods_opinsights" { resource_group_name = var.ws_resource_group_name tags = var.tre_workspace_tags - lifecycle { - create_before_destroy = true - ignore_changes = [tags] - } + lifecycle { ignore_changes = [tags] } } resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_ods_opinsights" { @@ -80,10 +65,7 @@ resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_ods_opin registration_enabled = false tags = var.tre_workspace_tags - lifecycle { - create_before_destroy = true - ignore_changes = [tags] - } + lifecycle { ignore_changes = [tags] } } resource "azurerm_private_dns_zone" "azure_monitor_agentsvc" { @@ -91,10 +73,7 @@ resource "azurerm_private_dns_zone" "azure_monitor_agentsvc" { resource_group_name = var.ws_resource_group_name tags = var.tre_workspace_tags - lifecycle { - create_before_destroy = true - ignore_changes = [tags] - } + lifecycle { ignore_changes = [tags] } } resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_agentsvc" { @@ -105,8 +84,5 @@ resource "azurerm_private_dns_zone_virtual_network_link" "azure_monitor_agentsvc registration_enabled = false tags = var.tre_workspace_tags - lifecycle { - create_before_destroy = true - ignore_changes = [tags] - } + lifecycle { ignore_changes = [tags] } }