Azure / Azure/azure-quickstart-templates

101-databricks-all-in-one-template-for-vnet-injection is not enough. NSGs missing.

Open
#6,994 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
Bicep
Stars
14.9k
Forks
16.2k
Avg merge
6d 21h
Merged PRs (30d)
6

Description

101-databricks-all-in-one-template-for-vnet-injection(https://github.com/Azure/azure-quickstart-templates/tree/master/101-databricks-all-in-one-template-for-vnet-injection)

### Issue Details
Although deployment of the template works, in practice, the created databricks workspace doesn´t.
Current template delegates subnets to databricks service, for databricks to create NetworkSecurityGroup rules. However, it seems the engine is not creating all required NSG rules.

After deploying the template, these are the NSG rules created:

![image](https://user-images.githubusercontent.com/999284/70514316-b5775480-1b33-11ea-867b-0204b5009fef.png)

Meanwhile, these are the NSG rules required as per documentation (https://docs.microsoft.com/en-us/azure/databricks/administration-guide/cloud-configurations/azure/vnet-inject#nsg):

![image](https://user-images.githubusercontent.com/999284/70514360-cde76f00-1b33-11ea-90c1-5cf2c4cd5625.png)

All of this results in an error when trying to access databricks workspace.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by inspecting the 101-databricks-all-in-one-template-for-vnet-injection directory and comparing its deployed NSGs with the required rules in the linked Azure Databricks VNet injection documentation. Done means the template creates the required NSG rules and the resulting Databricks workspace can be accessed successfully.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud, networking
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.