<pre><code>{&quot;code&quot;:&quot;DeploymentFailed&quot;,&quot;message&quot;:&quot;At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.&quot;,&quot;details&quot;:[{&quot;code&quot;:&quot;ResourceDeploymentFailure&quot;,&quot;message&quot;:&quot;The resource provision operation did not complete within the allowed timeout period.&quot;}]}.
</code></pre>
<p>I get this error message whenever I try to deploy my AKS Cluster, no matter if I deploy it through Terraform, The azure portal or Azure CLI.</p>
<p>The config I use is :</p>
<pre><code>az aks create --name Aks-moduleTf --max-count 1 --min-count 1 --network-plugin azure --vnet-subnet-id /subscriptions/&lt;SUBID&gt;/resourceGroups/MyResources/providers/Microsoft.Network/virtualNetworks/MyVnet/subnets/Mysubnet --node-count 1 --node-vm-size Standard_B2s --dns-service-ip X.X.X.X --resource-group MyResources --generate-ssh-keys --enable-cluster-autoscaler --service-cidr X.X.X.X/X
</code></pre>
<p>Thank you for your help.</p>

<p>The Error you are getting beacuse issue with the NSGS [acls] of subnet that are restricting the traffic flow to the Azure management network to let the AKS creation work.</p>
<p>These NSGs are associated with the Subnet in Vnet that you are trying to create an AKS for.</p>
<blockquote>
<p>Apparently, when we created a new AKS(resource) with all the default
options by creating a new subnet with no NSGs, It worked.</p>
</blockquote>
<p><strong>Az CLI code</strong></p>
<pre><code>az aks create --resource-group v-rXXXXXtree --name Aks-moduleTf --max-count 1 --min-count 1 --network-plugin azure --vnet-subnet-id /subscriptions/b83cXXXXXXXXXXXXX074c23f/resourceGroups/v-rXXXXXXXXXe/providers/Microsoft.Network/virtualNetworks/Vnet1/subnets/Subnet1 --node-count 1 --node-vm-size Standard_B2s --dns-service-ip 10.2.0.10 --service-cidr 10.2.0.0/24 --generate-ssh-keys --enable-cluster-autoscaler 
</code></pre>
<p><strong>Solution</strong> : If you are creating Azure resoruce with existing <code>vnet/subnet</code>. you need to disable(Select None) for the NSG of subnet.</p>
<p><a href="https://i.stack.imgur.com/f1nLq.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/f1nLq.png" alt="enter image description here" /></a></p>
<p><a href="https://i.stack.imgur.com/zLrp3.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/zLrp3.png" alt="enter image description here" /></a></p>
<p><a href="https://i.stack.imgur.com/dDrVt.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/dDrVt.png" alt="enter image description here" /></a></p>
<p><strong>Reference : You can check this <a href="https://social.msdn.microsoft.com/Forums/en-US/df3400a1-b31a-4159-a242-5f03000c04d2/appsrvenv-creation-times-out-quotthe-resource-provision-operation-did-not-complete-within-the?forum=windowsazurewebsitespreview" rel="nofollow noreferrer">link</a> one of the user faced this issue and went to Microsoft Support team and found the issue is with NSG</strong></p>
