Imagine a scenario: you have one global DNS zone in Prod subscription and several child DNS zones for each environment in their own subscriptions, e.g.:
- infra.example.com
- Subscription: Prod
- dev.infra.examle.com
- Subscription: Dev
- test.infra.example.com
- Subscription: Test
- prod.infra.example.com
- Subscription: Prod
Each zone is created using its own ARM template. But in order a child zone to start working you need to hook it up into the parent zone by updating its NS record, e.g.:
- dev.infra.example.com
- NS
- ns1-01.azure-dns.com.
- ns1-01.azure-dns.net
- ns1-01.azure-dns.org.
- ns1-09.azure-dns.info.
- NS
- infra.example.com
- dev
- NS
- the records must be inserted here
- NS
- dev
Here’s how to achieve that using ARM template:
{
"name": "[parameters('envDnsZoneName')]",
"type": "Microsoft.Network/dnsZones",
"apiVersion": "[variables('publicDnsApiVersion')]",
"location": "global"
},
{
"name": "[concat('DNS-Global-', parameters('environment'))]",
"type": "Microsoft.Resources/deployments",
"apiVersion": "[variables('apiVersion')]",
"subscriptionId": "[parameters('globalSubscriptionId')]",
"resourceGroup": "[parameters('globalResourceGroupName')]",
"properties": {
"mode": "Incremental",
"template": {
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"resources": [
{
"type": "Microsoft.Network/dnsZones/NS",
"name": "[concat(parameters('globalDnsZoneName'), '/', parameters('environment'))]",
"apiVersion": "[variables('publicDnsApiVersion')]",
"properties": {
"TTL": 3600,
"NSRecords": "[reference(resourceId('Microsoft.Network/dnszones/NS', parameters('envDnsZoneName'), '@'), variables('publicDnsApiVersion')).NSRecords]"
}
}
]
}
},
"dependsOn": [
"[concat('Microsoft.Network/dnsZones/', parameters('envDnsZoneName'))]"
]
}
Here’s what it does:
- Creates a child zone in current subscription and resource group
- Updates the parent zone in its own subscription and resource group, creates NS record with the value of NS records of the child zone
Happy deployment!
