Azure ARM中存储队列的专用终结点

Azure ARM中存储队列的专用终结点,azure,azure-resource-manager,azure-private-link,Azure,Azure Resource Manager,Azure Private Link,我可以通过门户为存储队列创建一个私有端点,在使用KUDU的nameresolver.exe进行检查时,它可以正常工作。然而,我正在努力寻找一个ARM模板,可以一次性完成这项工作 我已经使用了这个模板,但是我可以看到,A记录条目没有在生成的私有DNS区域中生成。我不知道如何创建该记录条目,似乎无法在线找到描述以下内容的ARM模板: { "$schema": "https://schema.management.azure.com/schemas/2019-04

我可以通过门户为存储队列创建一个私有端点,在使用KUDU的nameresolver.exe进行检查时,它可以正常工作。然而,我正在努力寻找一个ARM模板,可以一次性完成这项工作

我已经使用了这个模板,但是我可以看到,A记录条目没有在生成的私有DNS区域中生成。我不知道如何创建该记录条目,似乎无法在线找到描述以下内容的ARM模板:

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "privateEndpointName": {
            "type": "string",
            "defaultValue": "privendpoint-sapriv01-queue"
        },
        "vnetName": {
            "type": "string",
            "defaultValue": "vn-myvnet01"
        },
        "subnetName": {
            "type": "string",
            "defaultValue": "sn-private-endpoints"
        },
        "groupId": {
            "type": "string",
            "defaultValue": "queue"
        }
    },
    "variables": {
        "privateDNSZone_name": "[concat('privatelink', '.queue.', environment().suffixes.storage)]"
    },
    "resources": [
        {
            "apiVersion": "2019-04-01",
            "name": "[parameters('privateEndpointName')]",
            "type": "Microsoft.Network/privateEndpoints",
            "location": "[resourceGroup().Location]",
            "properties": {
                "privateLinkServiceConnections": [
                    {
                        "name": "[parameters('privateEndpointName')]",
                        "properties": {
                            "privateLinkServiceId": "[resourceId('Microsoft.Storage/storageAccounts', 'saprivendpointdemo')]",
                            "groupIds": [
                                "[parameters('groupId')]"
                            ]
                        }
                    }
                ],
                "manualPrivateLinkServiceConnections": [],
                "subnet": {
                    "id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('vnetName'), parameters('subnetName') )]"
                }
            }
        },
        {
            "type": "Microsoft.Network/privateDnsZones",
            "apiVersion": "2018-09-01",
            "name": "[variables('privateDNSZone_name')]",
            "location": "global",
            "tags": {},
            "properties": {}
        },
        {
            "type": "Microsoft.Network/privateDnsZones/virtualNetworkLinks",
            "apiVersion": "2018-09-01",
            "name": "[concat(variables('privateDNSZone_name'), '/', parameters('vnetName'), 'link' )]",
            "location": "global",
            "dependsOn": [
                "[resourceId('Microsoft.Network/privateDnsZones', variables('privateDNSZone_name'))]"
            ],
            "properties": {
                "virtualNetwork": {
                    "id": "[resourceId('Microsoft.Network/virtualNetworks', parameters('vnetName'))]"
                },
                "registrationEnabled": false
            }
        }
    ],
    "outputs": {
    }
}

我认为微软把这件事复杂化了。私有IP是自动生成的,我不知道如何在ARM模板中引用此IP。

如果要在Azure私有DNS区域中添加记录,可以在模板中定义
Microsoft.Network/privatedendpoints/privateDnsZoneGroups

比如说

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "privateEndpointName": {
            "type": "string",
            "defaultValue": "testqueue"
        },
        "vnetName": {
            "type": "string",
            "defaultValue": "teststorage"
        },
        "subnetName": {
            "type": "string",
            "defaultValue": "default"
        },
        "groupId": {
            "type": "string",
            "defaultValue": "queue"
        }
    },
    "variables": {
        "privateDNSZone_name": "[concat('privatelink', '.queue.', environment().suffixes.storage)]"
    },
    "resources": [
        {
            "apiVersion": "2019-04-01",
            "name": "[parameters('privateEndpointName')]",
            "type": "Microsoft.Network/privateEndpoints",
            "location": "[resourceGroup().Location]",
            "properties": {
                "privateLinkServiceConnections": [
                    {
                        "name": "[parameters('privateEndpointName')]",
                        "properties": {
                            "privateLinkServiceId": "[resourceId('Microsoft.Storage/storageAccounts', 'teststorage05')]",
                            "groupIds": [
                                "[parameters('groupId')]"
                            ]
                        }
                    }
                ],
                "manualPrivateLinkServiceConnections": [],
                "subnet": {
                    "id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('vnetName'), parameters('subnetName') )]"
                }
            }
        },
        {
            "type": "Microsoft.Network/privateDnsZones",
            "apiVersion": "2018-09-01",
            "name": "[variables('privateDNSZone_name')]",
            "dependsOn": [
                "[parameters('privateEndpointName')]"
            ],
            "location": "global",
            "tags": {},
            "properties": {}
        },
        {
            "type": "Microsoft.Network/privateDnsZones/virtualNetworkLinks",
            "apiVersion": "2018-09-01",
            "name": "[concat(variables('privateDNSZone_name'), '/', parameters('vnetName'), 'link' )]",
            "location": "global",
            "dependsOn": [
                "[resourceId('Microsoft.Network/privateDnsZones', variables('privateDNSZone_name'))]"
            ],
            "properties": {
                "virtualNetwork": {
                    "id": "[resourceId('Microsoft.Network/virtualNetworks', parameters('vnetName'))]"
                },
                "registrationEnabled": false
            }
        },
        {
            "type": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups",
            "apiVersion": "2020-03-01",
            "name": "[concat(parameters('privateEndpointName'), '/', 'default')]",
            "dependsOn": [
                "[parameters('privateEndpointName')]",
                "[variables('privateDNSZone_name')]"
            ],
            "location": "[resourceGroup().Location]",
            "properties": {
                "privateDnsZoneConfigs": [
                    {
                        "name": "privatelink-queue-core-windows-net",
                        "properties": {
                            "privateDnsZoneId": "[resourceId('Microsoft.Network/privateDnsZones',variables('privateDNSZone_name'))]"
                        }
                    }
                ]
            }
        }
    ],
    "outputs": {
    }
}

有关更多详细信息,请参阅和