Azure-docs: steps required for scenario

[porrascarlos802018]

hello Jagadeesh, I have a customer trying to archive this "Send task-based workload output from container instances to a database in the virtual network" do you have a guide or documentation on how to do it?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 81e00caf-dd95-441b-d2d5-0b3c979cb11b
• Version Independent ID: 83ed8e59-7ae8-332e-9ce0-7d80e8a973f8
• Content: Deploy container instances into an Azure virtual network
• Content Source: articles/container-instances/container-instances-vnet.md
• Service: container-instances
• GitHub Login: @dlepow
• Microsoft Alias: danlep

[Karishma-Tiwari-MSFT]

Thanks for the question. We are currently investigating and will update you shortly.

[jakaruna-MSFT]

@porrascarlos802018 That document has couple of suggested scenarios. I believe we don't have a separate document specific to that scenario.
Generally container instances will be deployed on a subnet delegated to the Container instances. So no other resources can go into that subnet (like vms). We can deploy databases in a seperate subnet and communication to and from the container instance subnet can be controlled as usual(with route tables and network security groups).
I am also adding the author to this issue to provide more information.

[jakaruna-MSFT]

@dlepow Please provide your inputs

[dlepow]

@porrascarlos802018 - Thanks for your question. I will log this as a potential future doc work item, since we don't currently document this specific scenario. Can you please provide more information, such as the type of database your customer is considering and details about the task and output? Would using a file share instead of a database be an option? Thank you.

[ahmedmakhlouk]

hi guys, i tried the tutorial, to expose the container instance via a Vnet and a subnet, but now i am stuck with hidden ressources that i struggle to Delete, started with the network profile that wasn't shown on the dashboard, i had to list the vnet profiles to get it,

and now last one is the 'Service Association Link' that i couldn't see a way to remove it by CLI,
and i am getting an error 401 (unauthorized) when i try to use the REST API :
https://docs.microsoft.com/en-us/rest/api/container-instances/serviceassociationlink/delete#examples
Thank you

[dlepow]

@ahmedelnably - The initial preview of the VNet with ACI feature requires several additional commands to delete the network resources. Please see the script at https://docs.microsoft.com/en-us/azure/container-instances/container-instances-vnet#clean-up-resources. Can you please try those steps?

[ahmedelnably]

I think you meant @ahmedmakhlouk :)

[ahmedmakhlouk]

Thank you @dlepow worked fine.

[chrnz]

@dlepow I'm the customer trying to achieve this "Send task-based workload output from container instances to a database in the virtual network"
The database is Azure SQL Database.
We don't want to use the too permissive setting "Allow access to Azure services" and so trying to allow the ACI specific subnet.
In our case, the task is a SQL request that we embed in a powershell script executing in a container based on the public image microsoft/powershell.

[dlepow]

@chrnz - Thanks for providing information about your scenario. Would adding a service endpoint to the Microsoft.Sql service from the ACI-specific subnet help? Overview of service endpoints here, and more detail about service endpoints for Azure SQL Database here.

[dlepow]

@chrnz - I will close this issue since according to my engineering partners, creating a service endpoint to the Microsoft.Sql service is the recommended way to set the permissions for your scenario. We plan to cover the service endpoint scenario more in this documentation in the future.

please-close

[BryanTrach-MSFT]

@porrascarlos802018 We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.