Azure Machine Learning Deployment Fails in Unrestricted Workspace Due to Workspace ID Parsing Error

[rahulhanumantchavan]

Describe the bug
When deploying an Azure Machine Learning workspace in an unrestricted workspace using UI, The deployment fails with a Workspace ID parsing error.

Note:

1. Same steps works successfully in restricted workspace / base workspace.
2. Tried both with expose externally enabled and disabled
3. Same results for eastus2 and switzerlandnorth region.

The parsed Resource ID was missing a value for the segment at position 7
(which should be the user specified value for this workspace [for example "workspaceValue"]).

Error: parsing "/subscriptions/*******/resourceGroups/rg-tre-ws/providers/Microsoft.OperationalInsights/workspaces/": parsing the Workspace ID: the segment at position 7 didn't match

Expected a Workspace ID that matched:

/subscriptions/12345678-1234-9876-4563-123456789012/resourceGroups/example-resource-group/providers/Microsoft.OperationalInsights/workspaces/workspaceValue

However this value was provided:

/subscriptions/*******/resourceGroups/rg-tre-ws/providers/Microsoft.OperationalInsights/workspaces/

The parsed Resource ID was missing a value for the segment at position 7
(which should be the user specified value for this workspace [for example "workspaceValue"]).

with azurerm_application_insights.ai,
on main.tf line 94, in resource "azurerm_application_insights" "ai":
94: workspace_id = data.azurerm_log_analytics_workspace.ws.id

Steps to reproduce

1. Create Azure Machine Learning Workspace Services in Unrestricted Workspace
2. Deployment fails with error "workspace-service is updating_failed"

Error: parsing "/subscriptions/<subscription_id>/resourceGroups/rg-tre/providers/Microsoft.OperationalInsights/workspaces/": parsing the Workspace ID: the segment at position 7 didn't match
Expected a Workspace ID that matched:

/subscriptions/<example_subscription_id>/resourceGroups/example-resource-group/providers/Microsoft.OperationalInsights/workspaces/workspaceValue
However this value was provided:
/subscriptions/<subscription_id>/resourceGroups/rg-tre/providers/Microsoft.OperationalInsights/workspaces/
The parsed Resource ID was missing a value for the segment at position 7 (which should be the user-specified value for this workspace [for example "workspaceValue"]).
with azurerm_application_insights.ai, on main.tf line 94, in resource "azurerm_application_insights" "ai":
94: workspace_id = data.azurerm_log_analytics_workspace.ws.id

Azure TRE release version (main):

Azure TRE
UI Version:
0.8.15
API Version:
0.24.5

Deployed Azure TRE components - click the (i) in the UI:
Restricted Workspace
Base Workspace
Airlock Import Review Workspace

Restricted Workspace workspace services deployed:
Azure Machine Learning
Apache Guacamole - Virtual Desktop Service

[marrobi]

Hi @rahulhanumantchavan thanks for raising this, is it just when in an unrestricted workspace?

I'll try to give it a test, but have been working on this PR - #4687 so will maybe try and fix as part of that.

[rahulhanumantchavan]

@marrobi This is happening with unrestricted workspace only, on restricted workspace it is working as expected.

[marrobi]

Ok, I can see this is down to the unrestricted workspace template missing a number of outputs.

       - name: backup_vault_name
        - name: vm_backup_policy_id
        - name: fileshare_backup_policy_id
        - name: log_analytics_workspace_name

the last being the issue reported.

[marrobi]

@rahulhanumantchavan are you able to test this version of the unrestricted workspace?

#4762

I'll try find time myself but be great if you can.

[rahulhanumantchavan]

@marrobi Sure, let me test it

[rahulhanumantchavan]

@marrobi

I am getting below Error message for switzerlandnorth region:

Error: specified service tag Storage not found for region switzerlandnorth

with data.azurerm_network_service_tags.storage_tag,
on outputs.tf line 29, in data "azurerm_network_service_tags" "storage_tag":
29: data "azurerm_network_service_tags" "storage_tag" {

Error: specified service tag MicrosoftContainerRegistry not found for region switzerlandnorth

with data.azurerm_network_service_tags.mcr_tag,
on outputs.tf line 35, in data "azurerm_network_service_tags" "mcr_tag":
35: data "azurerm_network_service_tags" "mcr_tag" {

Error: specified service tag BatchNodeManagement not found for region switzerlandnorth

with data.azurerm_network_service_tags.batch_tag,
on outputs.tf line 41, in data "azurerm_network_service_tags" "batch_tag":
41: data "azurerm_network_service_tags" "batch_tag" {

[marrobi]

Hmm, it looks like it should exist - https://azservicetags.azurewebsites.net/servicetag/microsoftcontainerregistry.switzerlandnorth

Does the base workspace have the same issue? Maybe need to upgrade the AzureRM provider version.

[rahulhanumantchavan]

@marrobi Encountered same error in Base workspace for Azure ML Deployment, if I recollect same issue exists for Azure Open AI in unrestricted workspace. Tomorrow I can test in eastus2 region and share observations.

[marrobi]

@rahulhanumantchavan the AzureRM provider in the Azure ML workspace is quite old, next steps will be to get that brought up to date. If I have time I will do it in this PR - #4687

[marrobi]

@rahulhanumantchavan I've updated the provider in #4687 , be interested to know if it resolves the switzerland north issues.

[rahulhanumantchavan]

@marrobi I tired deploying Azure Machine learning on switzerlandnorth region in Unrestricted Workspace but could not deploy it as it giving below error on browser console on submit button click.

Branch Deployed: copilot/fix-f88b1820-e937-46fd-b0d4-cb13f1592da9

Error:

<input type="text" id="root_workspace_researchers_group_id" name="root_workspace_researchers_group_id" placeholder="" required="" aria-describedby="root_workspace_researchers_group_id__error root_workspace_researchers_group_id__description root_workspace_researchers_group_id__help" aria-labelledby="TextFieldLabel254" class="ms-TextField-field field-277" aria-invalid="false" value="">

<input type="text" id="root_workspace_owners_group_id" name="root_workspace_owners_group_id" placeholder="" required="" aria-describedby="root_workspace_owners_group_id__error root_workspace_owners_group_id__description root_workspace_owners_group_id__help" aria-labelledby="TextFieldLabel249" class="ms-TextField-field field-277" aria-invalid="false" value="">

[marrobi]

@rahulhanumantchavan Apologies, I made some changed and only tested an upgrade, have replicated the issue, will revisit and let you know.