Skip to content

Manual PE approval flow creates DNS record after approval#2157

Merged
jtracey93 merged 4 commits intoAzure:mainfrom
timja:manual-private-endpoint-approval
Apr 29, 2026
Merged

Manual PE approval flow creates DNS record after approval#2157
jtracey93 merged 4 commits intoAzure:mainfrom
timja:manual-private-endpoint-approval

Conversation

@timja
Copy link
Copy Markdown
Contributor

@timja timja commented Apr 22, 2026

Overview/Summary

If you don't have write access on both sides of a private endpoint connection an approval request is sent to the resource owner. The policy previously didn't add DNS records for this flow.

Now it adds the records after the approval takes place

This PR fixes/adds/changes/removes

Fixes Azure/Azure-Landing-Zones#4136

Testing Evidence

Please provide any testing evidence to show that your Pull Request works/fixes as described and planned (include screenshots, if appropriate).

test-evidence

DNS record that was added after approval:

image

Testing URLs

The below URLs can be updated where the placeholders are, look for manual-private-endpoint-approval & manual-private-endpoint-approval, to allow you to test your portal deployment experience.

Please also replace the curly brackets on the placeholders {}

Azure Public

Deploy To Azure

Azure US Gov (Fairfax)

Deploy To Azure

As part of this Pull Request I have

  • Checked for duplicate Pull Requests
  • Associated it with relevant issues, for tracking and closure.
  • Ensured my code/branch is up-to-date with the latest changes in the main branch
  • Performed testing and provided evidence.
  • Ensured contribution guidance is followed.
  • Updated relevant and associated documentation.
  • Updated the "What's New?" wiki page (located: /docs/wiki/whats-new.md)

Copy link
Copy Markdown
Collaborator

@jtracey93 jtracey93 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @timja can you please install the latest version of Bicep and then run this command bicep build ./src/templates/policies.bicep --outfile ./eslzArm/managementGroupTemplates/policyDefinitions/policies.json to ensure the updates youve made are pulled into the policies.json is updated

@jtracey93 jtracey93 added the Needs: Author Feedback 👂 Needs the author to provide feedback label Apr 28, 2026
@jtracey93 jtracey93 moved this from To triage to In review in Azure Landing Zone Issues & PRs Triage Apr 28, 2026
@jtracey93
Copy link
Copy Markdown
Collaborator

really sorry @timja - could you pull in the latest changes from main and then re-run the bicep build command as we have had a few PRs queued up causing some merge conflicts - apologies

@jtracey93 jtracey93 merged commit 1228925 into Azure:main Apr 29, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Needs: Author Feedback 👂 Needs the author to provide feedback

Projects

Development

Successfully merging this pull request may close these issues.

[Feature Request]: Add support for manually approved private endpoints in policy Deploy-Private-DNS-Generic

2 participants