Merge pull request Azure#8873 from basaba/patch-4

101-kusto-vnet: Update following subnet delegation support
fitchtech · Mar 11, 2021 · 65b18d8 · 65b18d8
2 parents 5a89dad + ef5c2d6
commit 65b18d8
Showing 1 changed file with 28 additions and 27 deletions.
diff --git a/101-kusto-vnet/azuredeploy.json b/101-kusto-vnet/azuredeploy.json
@@ -41,8 +41,10 @@
   "variables": {
     "dataManagementPublicIpId": "[resourceId('Microsoft.Network/publicIPAddresses', parameters('dataManagementPublicIpName'))]",
     "enginePublicIpId": "[resourceId('Microsoft.Network/publicIPAddresses', parameters('enginePublicIpName'))]",
-    "nsgId": "[resourceId('Microsoft.Network/networkSecurityGroups', variables('nsgName'))]",
     "nsgName": "azureDataExplorerNsg",
+    "nsgId": "[resourceId('Microsoft.Network/networkSecurityGroups', variables('nsgName'))]",
+    "routeTableName": "azureDataExplorerRt",
+    "routeTableId": "[resourceId('Microsoft.Network/routeTables', variables('routeTableName'))]",
     "publicIpAllocationMethod": "Static",
     "subnetId": "[resourceId('Microsoft.Network/virtualNetworks/subnets',parameters('virtualNetworkName'),parameters('subnetName'))]",
     "vnetId": "[resourceId('Microsoft.Network/virtualNetworks',parameters('virtualNetworkName'))]"
@@ -70,6 +72,18 @@
         }
       }
     },
+    {
+      "apiVersion": "2020-05-01",
+      "type": "Microsoft.Network/networkSecurityGroups",
+      "name": "[variables('nsgName')]",
+      "location": "[parameters('location')]"
+    },
+    {
+      "apiVersion": "2020-05-01",
+      "type": "Microsoft.Network/routeTables",
+      "name": "[variables('routeTableName')]",
+      "location": "[parameters('location')]"
+    },
     {
       "apiVersion": "2020-05-01",
       "type": "Microsoft.Network/publicIPAddresses",
@@ -101,7 +115,7 @@
       "type": "Microsoft.Network/virtualNetworks",
       "name": "[parameters('virtualNetworkName')]",
       "location": "[parameters('location')]",
-      "dependsOn": [ "[variables('nsgId')]" ],
+      "dependsOn": [ "[variables('nsgName')]", "[variables('routeTableName')]"],
       "properties": {
         "addressSpace": {
           "addressPrefixes": [
@@ -115,31 +129,18 @@
               "addressPrefix": "10.0.0.0/20",
               "networkSecurityGroup": {
                 "id": "[variables('nsgId')]"
-              }
-            }
-          }
-        ]
-      }
-    },
-    {
-      "type": "Microsoft.Network/networkSecurityGroups",
-      "name": "[variables('nsgName')]",
-      "apiVersion": "2019-07-01",
-      "location": "[parameters('location')]",
-      "properties": {
-        "securityRules": [
-          {
-            "name": "AllowHTTPS",
-            "properties": {
-              "description": "Allow access using HTTPS",
-              "protocol": "Tcp",
-              "sourcePortRange": "*",
-              "destinationPortRange": "443",
-              "sourceAddressPrefix": "*",
-              "destinationAddressPrefix": "*",
-              "access": "Allow",
-              "priority": 100,
-              "direction": "Inbound"
+              },
+              "routeTable" :{
+                  "id": "[variables('routeTableId')]"
+              },
+              "delegations": [
+                  {
+                      "name": "AzureDataExplorer",
+                      "properties": {
+                          "serviceName" : "Microsoft.Kusto/clusters"
+                      }
+                  }
+              ]
             }
           }
         ]