Enable virtual network rules on datalake store in arm template

1
votes

I am trying to enable virtual network rules for a datalake store. Here is a bit of my arm template:

{
  "name": "datalakestoretest",
  "type": "Microsoft.DataLakeStore/accounts",
  "location": "[resourceGroup().location]",
  "apiVersion": "2016-11-01",
  "properties": {
    "virtualNetworkRules": [
      {
        "properties": {
          "subnetId": "[variables('subnetId')]"
        },
        "name": "vnetrulename"
      }
    ]
  },
  "dependsOn": [
    "[ concat('Microsoft.Network/virtualNetworks/', parameters('vnetName'))]"
  ]
}

When I deploy the template, it doesn't enable the vNet rule.

enter image description here

However, when I go to add the rule in the portal, the config for it already exists, without me having to select the vNet and the subnet.

enter image description here

So the datalake store is receiving the vNet rules from the template, but it's just not being enabled. How can I enable it?

I have also tried the syntax from the msft documentation, so the vNetRule as a separate resource, but it fails to deploy.

Thanks

1
azureazure-data-lakeazure-virtual-networkarm-template

1 Answers

2
votes

You need to add "firewallState": "Enabled", to the resource properties in the template:

{
    "properties": {
        "firewallState": "Enabled",
        "virtualNetworkRules": [
            {
                "properties": {
                    "subnetId": "xxx"
                },
                "name": "xxx"
            }
        ]
    },
    "apiVersion": "2016-11-01",
    "location": "yyy",
    "name": "xxx",
    "type": "Microsoft.DataLakeStore/accounts"
}