[Bug]: AzAPI plugin crashes while configuring subnet delegations

[mbansal86]

Which product(s) are you raising for?

Sub/LZ Vending (TF)

What versions of the tools are you using?

• AVM Module version - 0.2.0
• Terraform version - 1.14

What is the bug?

While configuring subnet delegations using the Subscription Vending module, I’m encountering AzAPI plugin-related errors which causing me not to configured the delegations in the subnets created by this module

Log Output

Error: Plugin did not respond

The plugin encountered an error, and failed to respond to the
plugin6.(*GRPCProvider).PlanResourceChange call. The plugin logs may contain
more details.

Error: Plugin did not respond

The plugin encountered an error, and failed to respond to the
plugin6.(*GRPCProvider).PlanResourceChange call. The plugin logs may contain
more details.
Planning failed. Terraform encountered an error while generating this plan.

Releasing state lock. This may take a few moments...

Stack trace from the terraform-provider-azapi_v2.9.0 plugin:

panic: runtime error: index out of range [0] with length 0

goroutine 180 [running]:
github.com/Azure/terraform-provider-azapi/utils.updateObjectAtPath({0xdb0d80, 0xc0016b34e8}, {0xdb0d80, 0xc0016b32a8}, {0x0, 0x0, 0x0, 0x0, 0x0}, {0xc000b97188, ...})
	github.com/Azure/terraform-provider-azapi/utils/json.go:159 +0x12a5
github.com/Azure/terraform-provider-azapi/utils.updateObjectAtPath({0xe42040, 0xc000a5f3e0}, {0xe42040, 0xc000a5f1d0}, {0x0, 0x0, 0x0, 0x0, 0x0}, {0xc001446a01, ...})
	github.com/Azure/terraform-provider-azapi/utils/json.go:145 +0x9cc
github.com/Azure/terraform-provider-azapi/utils.updateObjectAtPath({0xe42040, 0xc000a5f230}, {0xe42040, 0xc000a5f1a0}, {0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, ...})
	github.com/Azure/terraform-provider-azapi/utils/json.go:145 +0x9cc
github.com/Azure/terraform-provider-azapi/utils.UpdateObject(...)
	github.com/Azure/terraform-provider-azapi/utils/json.go:128
github.com/Azure/terraform-provider-azapi/internal/services.(*AzapiResource).ModifyPlan(0xc001767bb8, {0x146bada8, 0xc000861ce0}, {{{{0x146c0f58, 0xc00149d8c0}, {0xe431e0, 0xc0013b4540}}, {0x146c3748, 0xc0024dac30}}, {{{0x146c0f58, ...}, ...}, ...}, ...}, ...)
	github.com/Azure/terraform-provider-azapi/internal/services/azapi_resource.go:624 +0x1a13
github.com/hashicorp/terraform-plugin-framework/internal/fwserver.(*Server).PlanResourceChange(0xc000250008, {0x146bada8, 0xc000861ce0}, 0xc00246b180, 0xc0005cb5c0)
	github.com/hashicorp/terraform-plugin-framework@v1.16.1/internal/fwserver/server_planresourcechange.go:347 +0x1f9b
github.com/hashicorp/terraform-plugin-framework/internal/proto6server.(*Server).PlanResourceChange(0xc000250008, {0x146bada8?, 0xc000861b90?}, 0xc0011542a0)
	github.com/hashicorp/terraform-plugin-framework@v1.16.1/internal/proto6server/server_planresourcechange.go:72 +0x592
github.com/hashicorp/terraform-plugin-go/tfprotov6/tf6server.(*server).PlanResourceChange(0xc000252000, {0x146bada8?, 0xc000861260?}, 0xc001fcc700)
	github.com/hashicorp/terraform-plugin-go@v0.29.0/tfprotov6/tf6server/server.go:904 +0x3d9
github.com/hashicorp/terraform-plugin-go/tfprotov6/internal/tfplugin6._Provider_PlanResourceChange_Handler({0xf6c360, 0xc000252000}, {0x146bada8, 0xc000861260}, 0xc001fcc600, 0x0)
	github.com/hashicorp/terraform-plugin-go@v0.29.0/tfprotov6/internal/tfplugin6/tfplugin6_grpc.pb.go:771 +0x1a9
google.golang.org/grpc.(*Server).processUnaryRPC(0xc00024c000, {0x146bada8, 0xc0008611d0}, 0xc001154060, 0xc000206cf0, 0x14e095b0, 0x0)
	google.golang.org/grpc@v1.75.1/server.go:1431 +0x1036
google.golang.org/grpc.(*Server).handleStream(0xc00024c000, {0x146bbcf8, 0xc0002541a0}, 0xc001154060)
	google.golang.org/grpc@v1.75.1/server.go:1842 +0xb88
google.golang.org/grpc.(*Server).serveStreams.func2.1()
	google.golang.org/grpc@v1.75.1/server.go:1061 +0x7f
created by google.golang.org/grpc.(*Server).serveStreams.func2 in goroutine 24
	google.golang.org/grpc@v1.75.1/server.go:1072 +0x11d

Error: The terraform-provider-azapi_v2.9.0 plugin crashed!

Screenshot(s)

No response

[github-actions]

🤖 GitHub Agentic Workflow Automated Triage 🤖

• Issue assessment: The automated triage agent was unable to read the issue content due to an integrity policy restriction (a security safeguard against prompt injection). No automated triage actions could be performed.
• Labels applied: None — issue content could not be assessed.
• Duplicate check: Not performed — issue content could not be read.
• Suggested fix: Not available — requires manual triage by the team.

A human triager should review this issue and apply appropriate labels and triage actions.

Note

🔒 Integrity filter blocked 11 items

The following items were blocked because they don't meet the GitHub integrity level.

• #4121 issue_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• [Bug]: AzAPI plugin crashes while configuring subnet delegations #4121 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• [Bug]: The policy set 'Enforce-EncryptTransit' could not be parameterized #4116 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• [Bug]: Core-Logging pipeline step fails with error "GlobalResourceLock' is not defined in the template" #4110 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• Ignore resource check OR prevent cancel on destroy feature in azapi capability #4109 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• [Feature Request]: Hub-and-spoke module: output additional resource IDs, like network gateways #4107 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• [Feature Request]: Hub-and-spoke module: extract Connection as a separate module #4106 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• [Bug]: PolicySet Enforce-Guardrails-Network_20250326 wrong duplicate policy reference #4100 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• [Feature Request]: Propagate address_spaces as output #4099 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• [Bug]: ALZ module cannot manage policy assignments for externally-created addToNetworkGroup policy definitions #4098 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• [Bug]: AzAPI plugin crashes while configuring subnet delegations #4121 issue_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

Generated by Azure Landing Zones — Automated Issue Triage for issue #4121 · ● 267.5K · ◷