@@ -18,14 +18,20 @@ Format of the array of objects
18
18
{
19
19
privateLinkServiceNamespace: 'Microsoft.AzureCosmosDB/databaseAccounts'
20
20
zone: 'privatelink.documents.azure.com'
21
- filterLocationLike: "*" // when Private DNS Zone is not scoped to a region
21
+ filterLocationLike: '*' // when Private DNS Zone is not scoped to a region
22
22
groupId: 'SQL'
23
+ privateDnsZoneConfigs: [
24
+ 'privatelink.documents.azure.com'
25
+ ]
23
26
}
24
27
{
25
28
privateLinkServiceNamespace: 'Microsoft.ContainerService/managedCluster'
26
29
zone: 'privatelink.canadacentral.azmk8s.io'
27
- filterLocationLike: " canadacentral" // when Private DNS Zone is scoped to a region
30
+ filterLocationLike: ' canadacentral' // when Private DNS Zone is scoped to a region
28
31
groupId: 'management'
32
+ privateDnsZoneConfigs: [
33
+ 'privatelink.canadacentral.azmk8s.io'
34
+ ]
29
35
}
30
36
]
31
37
*/
@@ -57,6 +63,15 @@ var policySetDefinitionsPrivateDNSZonesDINE = [for (privateDNSZone, i) in privat
57
63
filterLocationLike : {
58
64
value : privateDNSZone .filterLocationLike
59
65
}
66
+ privateDnsZoneSubscriptionId : {
67
+ value : '[[parameters(\' privateDNSZoneSubscriptionId\' )]'
68
+ }
69
+ privateDnsZoneResourceGroupName : {
70
+ value : '[[parameters(\' privateDNSZoneResourceGroupName\' )]'
71
+ }
72
+ privateDnsZoneConfigs : {
73
+ value : privateDNSZone .privateDnsZoneConfigs
74
+ }
60
75
}
61
76
}]
62
77
@@ -82,6 +97,7 @@ resource policy 'Microsoft.Authorization/policyDefinitions@2020-09-01' = [for pr
82
97
zone : privateDNSZone .zone
83
98
groupId : privateDNSZone .groupId
84
99
filterLocationLike : privateDNSZone .filterLocationLike
100
+ privateDnsZoneConfigs : privateDNSZone .privateDnsZoneConfigs
85
101
}
86
102
displayName : '${customPolicyDefinition .properties .displayName } - ${privateDNSZone .zone } - ${privateDNSZone .privateLinkServiceNamespace } - ${privateDNSZone .groupId }'
87
103
mode : customPolicyDefinition .properties .mode
0 commit comments