search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.01k stars 21k forks source link

azure monitor private dns zone multiple private endpoints issue #122192

Open vimalkumarkada opened 2 weeks ago

vimalkumarkada commented 2 weeks ago

Hi,

We have an architecture, consisting of a single hub and multiple spokes, each spoke consists of a private aks cluster and a private endpoint for azure monitor pls. Issue no. 1 The following A records get overwritten in the private dns zone everytime we create a new private endpoint. Refrence: https://learn.microsoft.com/en-us/azure/azure-monitor/logs/private-link-configure#privatelink-monitor-azure-com Endpoints that get overwritten in.ai: Application Insights ingestion endpoint (both a global and a regional entry). api: Application Insights and Log Analytics API endpoint. live: Application Insights live metrics endpoint. profiler: Application Insights profiler endpoint. snapshot: Application Insights snapshot endpoint. diagservices-query: Application Insights Profiler and Snapshot Debugger (used when accessing profiler/debugger results in the Azure portal).

Issue no. 2 We spin down a spoke on need basis, however when we delete a private endpoint all the above mentioned records get deleted as well, meaning data ingestion for azure monitor completely stops from other private endpoints.

Bicep code we use to link private endpoint to the private dns zone

resource mon_pe_default 'Microsoft.Network/privateEndpoints/privateDnsZoneGroups@2023-05-01' = {
  name: 'default'
  parent:mon_pl
  properties: {
    privateDnsZoneConfigs: [
      {
        name: 'privatelink-monitor-azure-com'
        properties: {
          privateDnsZoneId: monitorPrivateDnsZoneId
        }
      }
    ]
  }
}

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

PesalaPavan commented 2 weeks ago

@vimalkumarkada Thanks for your feedback! We will investigate and update as appropriate.

SaibabaBalapur-MSFT commented 2 weeks ago

@vimalkumarkada Thanks for bringing this to our attention. I'm going to assign this to the document author so they can take a look at it accordingly.

@AbdullahBell Please review it.