Change private DNS zone

Using the Azure portal:

1. Select your Azure Database for PostgreSQL flexible server.

2. In the resource menu, select Networking.

   

3. For servers deployed with Private access (VNET Integration), the only network-related setting you can change is the private DNS zone where the server is integrated. To change it, in the Private DNS integration section, expand the Subscription and Private DNS zone dropdowns to select an existing private DNS zone where you want to integrate your server.

   

4. If the selected private DNS zone isn't linked to the virtual network where your server is injected, you see the Link private DNS zone to your virtual network checkbox. It's selected by default, and that means the selected private DNS zone is linked to the virtual network of your server. By clearing the checkbox, you decide to not link that private DNS zone to the virtual network of your server. As a consequence, none of the hosts in that virtual network can resolve the name of your server by using the A record that the server persists in that private zone. Select Save.

   

5. A notification informs you that the changes are being applied.

   

6. When the process finishes, a notification informs you that the changes were applied.

   

Use the az postgres flexible-server update command to change the private DNS zone associated with your server.

privateZoneId=$(az network private-dns zone show --resource-group <private_dns_zone_resource_group> --name <private_dns_zone> --query id --output tsv)
az postgres flexible-server update \
  --resource-group <server_resource_group> \
  --name <server> \
  --private-dns-zone $privateZoneId

To link the private DNS zone to the virtual network of your server, run the following commands:

# Obtain the delegated subnet in which your server is integrated 
subnetId=$(az postgres flexible-server show --resource-group <server_resource_group> --name <server> --query network.delegatedSubnetResourceId --output tsv)
# Trim the subnet part, to end up having the identifier of the virtual network
virtualNetworkId=$(echo $subnetId | sed 's/\/subnets.*//')
virtualNetworkName=$(echo $subnetId | sed -n 's|.*/virtualNetworks/\(.*\)/subnets/.*|\1|p')
# Link the private DNS zone to the virtual network
az network private-dns link vnet create --resource-group <private_dns_zone_resource_group> --zone-name <private_dns_zone> --virtual-network $virtualNetworkId --registration-enabled false --name $virtualNetworkName