[Feature Request] - Deploy private endpoints for key vault and storage without private dns integration about avdaccelerator HOT 3 CLOSED

@stalejohnsen Thank you for raising this issue. It is a fair point that Private DNS zones may be provisioned under platform team scope and thus not giving the workload team access to write. It is currently designed to require Private DNS zone configuration at deployment because if Private Endpoints are being used without adding records to the Private DNS Zones, the deployment will fail. We will review this further.

cc: @swathibhat1 Let's add this to the backlog and discuss further.

from avdaccelerator.

@stalejohnsen great feedback.

Some thoughts:

Not registering the private endpoints at deployment time but waiting for policies to apply will break the FSLogix deployment since the storage rules are set to only allow connections on the private endpoint but the VMs can't resolve the private IP until the DNS settings are in place.

For the deployment of FSLogix to be successful, we will need to run a deployment without private endpoints and then add the PE setup as an add-on brownfield scenario.

from avdaccelerator.

@swathibhat1 let's work on this one as an ADO new feature request / enhancement.

@stalejohnsen we will keep you updated.

from avdaccelerator.