az network dns zone create does not work well if parent zone is not in the same resource group.

Describe the bug

when using az network dns zone create --name child.myname.com --resource-group mynewgroup --parent myname.com azcli returns an error message indicating that the parent zone can not be found if the parent is not in the same resource group as the new child zone.

resource is created but it does not perform correct DNS resolution.

Related command

az network dns zone create

Errors

(ParentResourceNotFound) Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptionsxxxxxx/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/xxxxxxx.stream' could not be found. Code: ParentResourceNotFound Message: Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/xxxxxxxx/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/xxxxxxstream' could not be found.

Issue script & Debug output

cli.knack.cli: Command arguments: ['network', 'dns', 'zone', 'create', '-g', 'vlscanadacentral', '--name', 'vls4.abcdomain.stream', '--parent', 'abcdomain.stream', '--debug'] cli.knack.cli: init debug log: Enable color in terminal. cli.knack.cli: Event: Cli.PreExecute [] cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x737f37e0bf60>, <function OutputProducer.on_global_arguments at 0x737f37db6160>, <function CLIQuery.on_global_arguments at 0x737f37df3c40>] cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate [] cli.azure.cli.core: Modules found from index for 'network': ['azure.cli.command_modules.network', 'azure.cli.command_modules.privatedns'] cli.azure.cli.core: Loading command modules: cli.azure.cli.core: Name Load Time Groups Commands cli.azure.cli.core: network 0.302 117 359 cli.azure.cli.core: privatedns 0.006 14 60 cli.azure.cli.core: Total (2) 0.308 131 419 cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next'] cli.azure.cli.core: Loading extensions: cli.azure.cli.core: Name Load Time Groups Commands Directory cli.azure.cli.core: Total (0) 0.000 0 0 cli.azure.cli.core: Loaded 130 groups, 419 commands. cli.azure.cli.core: Found a match in the command table. cli.azure.cli.core: Raw command : network dns zone create cli.azure.cli.core: Command table: network dns zone create cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x737f3708eca0>] cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/abc/.azure/commands/2024-09-01.16-05-35.network_dns_zone_create.480128.log'. az_command_data_logger: command args: network dns zone create -g {} --name {} --parent {} --debug cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x737f370e3240>] cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad [] cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x737f370e32e0>, <function register_cache_arguments..add_cache_arguments at 0x737f370e3420>] cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded [] cli.knack.cli: Event: CommandInvoker.OnPreParseArgs [] cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x737f37db6200>, <function CLIQuery.handle_query_parameter at 0x737f37df3ce0>, <function register_ids_argument..parse_ids_arguments at 0x737f370e3380>] cli.azure.cli.core.auth.persistence: build_persistence: location='/home/abc/.azure/msal_token_cache.json', encrypt=False cli.azure.cli.core.auth.binary_cache: load: /home/abc/.azure/msal_http_cache.bin urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None) msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/****----**** msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'} msal.application: Broker enabled? None cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={} cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={} msal.application: Found 1 RTs matching {'environment': 'login.microsoftonline.com', 'home_account_id': '****.72f988bf-86f1-41af-91ab-2d7cd011db47', 'family_id': '1'} msal.telemetry: Generate or reuse correlation_id: 0ae23551-018e-4e83-8d0a-15a9e98c153c msal.application: Cache attempts an RT urllib3.connectionpool: Starting new HTTPS connection (1): login.microsoftonline.com:443 urllib3.connectionpool: https://login.microsoftonline.com:443 "POST /****----****/oauth2/v2.0/token HTTP/1.1" 200 5904 msal.token_cache: event={ "client_id": "04b07795-8ddb-461a-bbee-02f9e1bf7b46", "data": { "claims": "{\"access_token\": {\"xms_cc\": {\"values\": [\"CP1\"]}}}", "refresh_token": "****", "scope": [ "offline_access", "https://management.core.windows.net//.default", "openid", "profile" ] }, "environment": "login.microsoftonline.com", "grant_type": "refresh_token", "params": null, "response": { "access_token": "****", "client_info": "eyJ1aWQiOiI3YmMxMWNiNS0xMWVkLTRhZWQtODkyNi0zZjRmN2I2NmMyOGEiLCJ1dGlkIjoiNzJmOTg4YmYtODZmMS00MWFmLTkxYWItMmQ3Y2QwMTFkYjQ3In0", "expires_in": 4421, "ext_expires_in": 4421, "foci": "1", "id_token": "****", "scope": "https://management.core.windows.net//user_impersonation https://management.core.windows.net//.default", "token_type": "Bearer" }, "scope": [ "https://management.core.windows.net//user_impersonation", "https://management.core.windows.net//.default" ], "skip_account_creation": true, "token_endpoint": "https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token" } cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/vls4.abcdomain.stream?api-version=2023-07-01-preview' cli.azure.cli.core.sdk.policies: Request method: 'PUT' cli.azure.cli.core.sdk.policies: Request headers: cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json' cli.azure.cli.core.sdk.policies: 'Accept': 'application/json' cli.azure.cli.core.sdk.policies: 'Content-Length': '22' cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94' cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create' cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug' cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)' cli.azure.cli.core.sdk.policies: 'Authorization': '*' cli.azure.cli.core.sdk.policies: Request body: cli.azure.cli.core.sdk.policies: {"location": "global"} urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443 urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/****----****/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/vls4.abcdomain.stream?api-version=2023-07-01-preview HTTP/1.1" 201 546 cli.azure.cli.core.sdk.policies: Response status: 201 cli.azure.cli.core.sdk.policies: Response headers: cli.azure.cli.core.sdk.policies: 'Cache-Control': 'private' cli.azure.cli.core.sdk.policies: 'Content-Length': '546' cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8' cli.azure.cli.core.sdk.policies: 'ETag': '10fb39ab-f925-423c-8abc-2b55cf9ce0dc' cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff' cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains' cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94' cli.azure.cli.core.sdk.policies: 'X-Powered-By': 'ASP.NET' cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-resource-requests': '11999' cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '9a142299-d5b7-40aa-a942-d937f6d6d9d7' cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:9a142299-d5b7-40aa-a942-d937f6d6d9d7' cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE' cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: F36BC7EC7232429EB0E0C1F3831B9B17 Ref B: MNZ221060610035 Ref C: 2024-09-01T20:05:36Z' cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:39 GMT' cli.azure.cli.core.sdk.policies: Response content: cli.azure.cli.core.sdk.policies: {"id":"\/subscriptions\/****----****\/resourceGroups\/vlscanadacentral\/providers\/Microsoft.Network\/dnszones\/vls4.abcdomain.stream","name":"vls4.abcdomain.stream","type":"Microsoft.Network\/dnszones","etag":"10fb39ab-f925-423c-8abc-2b55cf9ce0dc","location":"global","tags":{},"properties":{"maxNumberOfRecordSets":10000,"maxNumberOfRecordsPerRecordSet":null,"nameServers":["ns1-04.azure-dns.com.","ns2-04.azure-dns.net.","ns3-04.azure-dns.org.","ns4-04.azure-dns.info."],"numberOfRecordSets":2,"zoneType":"Public"}} cli.azure.cli.command_modules.network.custom: Attempting to add delegation in the parent zone urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None) msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/****----**** msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'} msal.application: Broker enabled? None cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={} cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={} msal.application: Cache hit an AT msal.telemetry: Generate or reuse correlation_id: 3b8d9361-9820-4e26-b420-66f832f0b72f cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview' cli.azure.cli.core.sdk.policies: Request method: 'GET' cli.azure.cli.core.sdk.policies: Request headers: cli.azure.cli.core.sdk.policies: 'Accept': 'application/json' cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94' cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create' cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug' cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)' cli.azure.cli.core.sdk.policies: 'Authorization': '*' cli.azure.cli.core.sdk.policies: Request body: cli.azure.cli.core.sdk.policies: This request has no body urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443 urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/****----****/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview HTTP/1.1" 404 308 cli.azure.cli.core.sdk.policies: Response status: 404 cli.azure.cli.core.sdk.policies: Response headers: cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache' cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache' cli.azure.cli.core.sdk.policies: 'Content-Length': '308' cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8' cli.azure.cli.core.sdk.policies: 'Expires': '-1' cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'gateway' cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'c7be9b4d-9347-43e2-ae32-a6f2afaa57b8' cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'c7be9b4d-9347-43e2-ae32-a6f2afaa57b8' cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:c7be9b4d-9347-43e2-ae32-a6f2afaa57b8' cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains' cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff' cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE' cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 71A9BAC824B04A51909810ABA5E0BB44 Ref B: MNZ221060610007 Ref C: 2024-09-01T20:05:40Z' cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:39 GMT' cli.azure.cli.core.sdk.policies: Response content: cli.azure.cli.core.sdk.policies: {"error":{"code":"ParentResourceNotFound","message":"Failed to perform 'read' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/****----****/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found."}} urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None) msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/****----**** msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'} msal.application: Broker enabled? None cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={} cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={} msal.application: Cache hit an AT msal.telemetry: Generate or reuse correlation_id: 051a9713-240c-46ce-9ccf-18ba7008a11e cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview' cli.azure.cli.core.sdk.policies: Request method: 'PUT' cli.azure.cli.core.sdk.policies: Request headers: cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json' cli.azure.cli.core.sdk.policies: 'Accept': 'application/json' cli.azure.cli.core.sdk.policies: 'Content-Length': '82' cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94' cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create' cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug' cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)' cli.azure.cli.core.sdk.policies: 'Authorization': '*' cli.azure.cli.core.sdk.policies: Request body: cli.azure.cli.core.sdk.policies: {"properties": {"NSRecords": [{"nsdname": "ns1-04.azure-dns.com."}], "TTL": 3600}} urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443 urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/****----****/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview HTTP/1.1" 404 309 cli.azure.cli.core.sdk.policies: Response status: 404 cli.azure.cli.core.sdk.policies: Response headers: cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache' cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache' cli.azure.cli.core.sdk.policies: 'Content-Length': '309' cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8' cli.azure.cli.core.sdk.policies: 'Expires': '-1' cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'gateway' cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'b8f06ac9-e75a-4552-b2c0-fe3fe4564e80' cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'b8f06ac9-e75a-4552-b2c0-fe3fe4564e80' cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:b8f06ac9-e75a-4552-b2c0-fe3fe4564e80' cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains' cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff' cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE' cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: CA4B2E4C7A5247AEBA8E42D647B6A656 Ref B: MNZ221060610019 Ref C: 2024-09-01T20:05:40Z' cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:40 GMT' cli.azure.cli.core.sdk.policies: Response content: cli.azure.cli.core.sdk.policies: {"error":{"code":"ParentResourceNotFound","message":"Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/****----****/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found."}} cli.azure.cli.command_modules.network.custom: (ParentResourceNotFound) Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/****----****/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found. Code: ParentResourceNotFound Message: Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/****----****/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found. Could not add delegation in 'abcdomain.stream'

cli.knack.cli: Event: CommandInvoker.OnTransformResult [<function _resource_group_transform at 0x737f370e0220>, <function _x509_from_base64_to_hex_transform at 0x737f370e02c0>] cli.knack.cli: Event: CommandInvoker.OnFilterResult [] { "etag": "10fb39ab-f925-423c-8abc-2b55cf9ce0dc", "id": "/subscriptions/****----****/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/vls4.abcdomain.stream", "location": "global", "maxNumberOfRecordSets": 10000, "name": "vls4.abcdomain.stream", "nameServers": [ "ns1-04.azure-dns.com.", "ns2-04.azure-dns.net.", "ns3-04.azure-dns.org.", "ns4-04.azure-dns.info." ], "numberOfRecordSets": 2, "resourceGroup": "vlscanadacentral", "tags": {}, "type": "Microsoft.Network/dnszones", "zoneType": "Public" } cli.knack.cli: Event: Cli.SuccessfulExecute [] cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x737f3708ef20>] az_command_data_logger: exit code: 0 cli.main: Command ran in 5.687 seconds (init: 0.073, invoke: 5.614) telemetry.main: Begin splitting cli events and extra events, total events: 1 telemetry.client: Accumulated 0 events. Flush the clients. telemetry.main: Finish splitting cli events and extra events, cli events: 1 telemetry.save: Save telemetry record of length 3799 in cache telemetry.main: Begin creating telemetry upload process. telemetry.process: Creating upload process: "/opt/az/bin/python3 /opt/az/lib/python3.11/site-packages/azure/cli/telemetry/init.py /home/abc/.azure" telemetry.process: Return from creating process telemetry.main: Finish creating telemetry upload process.

Expected behavior

As per documentation and portal behavior, child dns zone should be able to operate successfully even if not created in the same group as the parent zone.

Environment Summary

test: az --version azure-cli 2.63.0

core 2.63.0 telemetry 1.1.0

Extensions: serial-console 1.0.0b1 ssh 2.0.5 vm-repair 1.0.9

Dependencies: msal 1.30.0 azure-mgmt-resource 23.1.1

Python location '/opt/az/bin/python3' Extensions directory '/home/esv/.azure/cliextensions'

Python (Linux) 3.11.8 (main, Jul 31 2024, 03:39:39) [GCC 11.4.0]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

nothing to add

Azure / azure-cli