Deploy or connect an Azure Managed Instance database with a discovered network.

How to configure a discovered network to deploy an Azure Managed Instance Database

Overview

Tuono has the ability to discover an existing network and subnet in your infrastructure and deploy or connect to an Azure Managed Instance database. Since we treat discovered networks as read only objects you are required to configure the network manually to prepare it for database usage.

Azure Managed Instances requires the following configuration that will not automatically be configured in a read only network.

1. Subnet with a 'Microsoft.Sql/managedInstances' delegation.

2. Route Table created and associated to the subnet

3. Network Security Group created and associated to the subnet

Error message

When attempting to deploy a Microsoft Azure Managed Instance database to a discovered network you will receive the following error:

Service Endpoint missing

Error: managed.database.<DATABASE_NAME> uses a ManagedInstance that needs the subnet to have: 

a route table; a network security group; 

delegated 'Microsoft.Sql/managedInstances'Remedy: 

Allow the subnet to be changed, or add missing configurations

Resolution

Execute the following Azure cli commands to configure the network.

1. Open an Azure shell console https://shell.azure.com/.

2. Set your account subscription in cloud shell

az account set --subscription <mysubscription>

1. Create a Route Table in your resource group

az network route-table create -g <REASOURcE_GROUP_NAME> -n <ROUTE_TABLE_NAME>

1. Create a Network Security Group in your resource group

az network nsg create -g <REASOURE_GROUP_NAME> -n <NSG_NAME>

1. Add a Microsoft.Sql/managedInstances delegation to your subnet and associate the Network Security Group and Route Table you previously created by executing the subnet update command in cloud shell.

az network vnet subnet update -g <REASOURE_GROUP_NAME> -n <SUBNET_NAME> --vnet-name <VNET_NAME> --network-security-group <NSG_NAME> --delegations Microsoft.Sql/managedInstances --route-table <ROUTE_TABLE_NAME>

1. Re-run the Tuono job.