Azure Bastion Deployment Failure

Question

I'm trying to deploy Azure Bastion into FranceCentral and I'm getting the following message:

The resource operation completed with terminal provisioning state 'Failed'.

The gateway deployment operation failed due to an intermittent error. Please try again.

Is there any way to find more information about why the deployment failed?

I've checked quotas for Public IP address and have 2 remaining. Also the Public IP for the Azure Bastion has already been provisioned but not associated.

The AzureBastionSubnet has been provisioned in advance too.

Answer 1

In the past this error has been due to an Azure side issue, and will usually resolve itself. are you still seeing this error when you try to deploy?

I was unable to find any outage happening that could have caused this error. 

Answer 2

Tried again this morning (UK time) and I'm still getting the same error. I've attached more information from the Azure Portal:

Status: Conflict

{
    "status": "Failed",
    "error": {
        "code": "ResourceDeploymentFailure",
        "message": "The resource operation completed with terminal provisioning state 'Failed'.",
        "details": [
            {
                "code": "VmssGatewayDeploymentFailed",
                "message": "The gateway deployment operation failed due to an intermittent error. Please try again.",
                "details": []
            }
        ]
    }
}

The Deployment Template:

{
    "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "location": {
            "type": "String"
        },
        "resourceGroup": {
            "type": "String"
        },
        "bastionHostName": {
            "type": "String"
        },
        "subnetId": {
            "type": "String"
        },
        "publicIpAddressId": {
            "type": "String"
        }
    },
    "resources": [
        {
            "type": "Microsoft.Network/bastionHosts",
            "apiVersion": "2018-10-01",
            "name": "[parameters('bastionHostName')]",
            "location": "[parameters('location')]",
            "dependsOn": [],
            "tags": {
                "location": "francecentral"
            },
            "properties": {
                "ipConfigurations": [
                    {
                        "name": "IpConf",
                        "properties": {
                            "subnet": {
                                "id": "[parameters('subnetId')]"
                            },
                            "publicIPAddress": {
                                "id": "[parameters('publicIpAddressId')]"
                            }
                        }
                    }
                ]
            }
        }
    ]
}

Answer 3

I was able to deploy an Azure Bastion in the France Central region without issue, so this is a problem with your subscription. 


How many Public IPs are available for your subscription? Azure Bastion requires at least 3 to be able to deploy.


You can check this limit by navigating to 'Subscriptions' in the Azure Portal, and select the subscription you are trying to deploy to. 


Next, select 'Usage and Quotas' under the 'Settings' menu on the left, and then under 'all Service Quotas' select 'Public IP Addresses'. 


check how many are available under the 'France Central' region


If you show less than 3 free IP Addresses for that region, request more in the top right. if you show more than 3 free IP Addresses, then we will need to take a deeper look at your subscription to see why this is failing with a Support Request. If you do not have a support plan, please let me know!

Answer 4

Thanks Travis.

We had 2 IP addresses showing after we had already provisioned the Bastion Public IP. But this wasn't enough.

Wanted to link to the prerequisites for Azure Bastion. But can't see anywhere in the Azure Bastion documentation that states the amount of Public IP addresses required?