Skip to content

Conversation

@heintonny
Copy link

Overview/Summary

Add support for policy driven update of SQL Server Private DNS Zone group deployment.

This have been a Long term issue:
#1478
...who seems to never get prioritized because it also require a new azure built-in policy.

This PR depends on PR:
Azure/azure-policy#1418
get approved and merged to azure built-in policies:

This PR fixes/adds/changes/removes

  1. SQL Server Private DNS Zone group DINE policy

Breaking Changes

  1. None

Testing Evidence

Please provide any testing evidence to show that your Pull Request works/fixes as described and planned (include screenshots, if appropriate).

Testing URLs

Policy Initiative is confirmed to work with EPAC deployment of the same policy definition and assignment file. Private DNS Zone is updated with DINE policy delays (several minutes).
image
image

Please also replace the curly brackets on the placeholders {}

Azure Public

[Deploy To Azure](https://portal.azure.com/#blade/Microsoft_Azure_CreateUIDef/CustomDeploymentBlade/uri/https%3A%2F%2Fraw.githubusercontent.com%2FHafslundEcoVannkraft%2FEnterprise-Scale%2F[feat/sql/private-dns-zone-dine](https://github.com/HafslundEcoVannkraft/Enterprise-Scale/tree/feat/sql/private-dns-zone-dine)%2FeslzArm%2FeslzArm.json/uiFormDefinitionUri/https%3A%2F%2Fraw.githubusercontent.com%2FHafslundEcoVannkraft%2FEnterprise-Scale%2F[feat/sql/private-dns-zone-dine](https://github.com/HafslundEcoVannkraft/Enterprise-Scale/tree/feat/sql/private-dns-zone-dine%2FeslzArm%2Feslz-portal.json)

Azure US Gov (Fairfax)

[Deploy To Azure](https://portal.azure.us/#blade/Microsoft_Azure_CreateUIDef/CustomDeploymentBlade/uri/https%3A%2F%2Fraw.githubusercontent.com%2F{YOUR GITHUB ORG/ACCOUNT HERE - Remove Curly Brackets Also}%2FEnterprise-Scale%2F{YOUR GITHUB BRANCH NAME HERE - Remove Curly Brackets Also}%2FeslzArm%2FeslzArm.json/uiFormDefinitionUri/https%3A%2F%2Fraw.githubusercontent.com%2F{YOUR GITHUB ORG/ACCOUNT HERE - Remove Curly Brackets Also}%2FEnterprise-Scale%2F{YOUR GITHUB BRANCH NAME HERE - Remove Curly Brackets Also}%2FeslzArm%2Ffairfaxeslz-portal.json)

As part of this Pull Request I have

  • Checked for duplicate Pull Requests
  • Associated it with relevant issues, for tracking and closure.
  • Ensured my code/branch is up-to-date with the latest changes in the main branch
  • Performed testing and provided evidence.
  • Ensured contribution guidance is followed.
  • Updated relevant and associated documentation.
  • Updated the "What's New?" wiki page (located: /docs/wiki/whats-new.md)

@heintonny
Copy link
Author

If Microsoft don´t plan to implement the SQL Server Private DNS Zone DINE as built-in policy I suggest that the policy is included as ALZ spesific policy definition as you did for other paas services earlier.

@Springstone
Copy link
Member

HI @heintonny, we do provide a generic policy that we maintain to enable Private DNS Zones (https://www.azadvertizer.net/azpolicyadvertizer/Deploy-Private-DNS-Generic.html) for resources that don't yet have a built-in policy available. We've done this to minimize policy maintenance overhead and still provide the ability to enable Private DNS Zones.

Does this work for your scenario?

@Springstone Springstone added the Needs: Author Feedback 👂 Needs the author to provide feedback label Mar 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Needs: Author Feedback 👂 Needs the author to provide feedback

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants