Describe the bug
when using az network dns zone create --name child.myname.com --resource-group mynewgroup --parent myname.com azcli returns an error message indicating that the parent zone can not be found if the parent is not in the same resource group as the new child zone.
resource is created but it does not perform correct DNS resolution.
Related command
az network dns zone create
Errors
(ParentResourceNotFound) Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptionsxxxxxx/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/xxxxxxx.stream' could not be found.
Code: ParentResourceNotFound
Message: Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/xxxxxxxx/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/xxxxxxstream' could not be found.
Issue script & Debug output
cli.knack.cli: Command arguments: ['network', 'dns', 'zone', 'create', '-g', 'vlscanadacentral', '--name', 'vls4.abcdomain.stream', '--parent', 'abcdomain.stream', '--debug']
cli.knack.cli: init debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x737f37e0bf60>, <function OutputProducer.on_global_arguments at 0x737f37db6160>, <function CLIQuery.on_global_arguments at 0x737f37df3c40>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'network': ['azure.cli.command_modules.network', 'azure.cli.command_modules.privatedns']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: network 0.302 117 359
cli.azure.cli.core: privatedns 0.006 14 60
cli.azure.cli.core: Total (2) 0.308 131 419
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name Load Time Groups Commands Directory
cli.azure.cli.core: Total (0) 0.000 0 0
cli.azure.cli.core: Loaded 130 groups, 419 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : network dns zone create
cli.azure.cli.core: Command table: network dns zone create
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x737f3708eca0>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/abc/.azure/commands/2024-09-01.16-05-35.network_dns_zone_create.480128.log'.
az_command_data_logger: command args: network dns zone create -g {} --name {} --parent {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x737f370e3240>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x737f370e32e0>, <function register_cache_arguments..add_cache_arguments at 0x737f370e3420>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x737f37db6200>, <function CLIQuery.handle_query_parameter at 0x737f37df3ce0>, <function register_ids_argument..parse_ids_arguments at 0x737f370e3380>]
cli.azure.cli.core.auth.persistence: build_persistence: location='/home/abc/.azure/msal_token_cache.json', encrypt=False
cli.azure.cli.core.auth.binary_cache: load: /home/abc/.azure/msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/********-****-****-****-************
msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={}
msal.application: Found 1 RTs matching {'environment': 'login.microsoftonline.com', 'home_account_id': '.72f988bf-86f1-41af-91ab-2d7cd011db47', 'family_id': '1'}
msal.telemetry: Generate or reuse correlation_id: 0ae23551-018e-4e83-8d0a-15a9e98c153c
msal.application: Cache attempts an RT
urllib3.connectionpool: Starting new HTTPS connection (1): login.microsoftonline.com:443
urllib3.connectionpool: https://login.microsoftonline.com:443 "POST /----/oauth2/v2.0/token HTTP/1.1" 200 5904
msal.token_cache: event={
"client_id": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
"data": {
"claims": "{"access_token": {"xms_cc": {"values": ["CP1"]}}}",
"refresh_token": "",
"scope": [
"offline_access",
"https://management.core.windows.net//.default",
"openid",
"profile"
]
},
"environment": "login.microsoftonline.com",
"grant_type": "refresh_token",
"params": null,
"response": {
"access_token": "",
"client_info": "eyJ1aWQiOiI3YmMxMWNiNS0xMWVkLTRhZWQtODkyNi0zZjRmN2I2NmMyOGEiLCJ1dGlkIjoiNzJmOTg4YmYtODZmMS00MWFmLTkxYWItMmQ3Y2QwMTFkYjQ3In0",
"expires_in": 4421,
"ext_expires_in": 4421,
"foci": "1",
"id_token": "",
"scope": "https://management.core.windows.net//user_impersonation https://management.core.windows.net//.default",
"token_type": "Bearer"
},
"scope": [
"https://management.core.windows.net//user_impersonation",
"https://management.core.windows.net//.default"
],
"skip_account_creation": true,
"token_endpoint": "https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token"
}
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/vls4.abcdomain.stream?api-version=2023-07-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '22'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"location": "global"}
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/vls4.abcdomain.stream?api-version=2023-07-01-preview HTTP/1.1" 201 546
cli.azure.cli.core.sdk.policies: Response status: 201
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'private'
cli.azure.cli.core.sdk.policies: 'Content-Length': '546'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'ETag': '10fb39ab-f925-423c-8abc-2b55cf9ce0dc'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'X-Powered-By': 'ASP.NET'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-resource-requests': '11999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '9a142299-d5b7-40aa-a942-d937f6d6d9d7'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:9a142299-d5b7-40aa-a942-d937f6d6d9d7'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: F36BC7EC7232429EB0E0C1F3831B9B17 Ref B: MNZ221060610035 Ref C: 2024-09-01T20:05:36Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:39 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"id":"/subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/vls4.abcdomain.stream","name":"vls4.abcdomain.stream","type":"Microsoft.Network/dnszones","etag":"10fb39ab-f925-423c-8abc-2b55cf9ce0dc","location":"global","tags":{},"properties":{"maxNumberOfRecordSets":10000,"maxNumberOfRecordsPerRecordSet":null,"nameServers":["ns1-04.azure-dns.com.","ns2-04.azure-dns.net.","ns3-04.azure-dns.org.","ns4-04.azure-dns.info."],"numberOfRecordSets":2,"zoneType":"Public"}}
cli.azure.cli.command_modules.network.custom: Attempting to add delegation in the parent zone
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/********-****-****-****-*******
msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 3b8d9361-9820-4e26-b420-66f832f0b72f
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview HTTP/1.1" 404 308
cli.azure.cli.core.sdk.policies: Response status: 404
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '308'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'gateway'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'c7be9b4d-9347-43e2-ae32-a6f2afaa57b8'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'c7be9b4d-9347-43e2-ae32-a6f2afaa57b8'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:c7be9b4d-9347-43e2-ae32-a6f2afaa57b8'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 71A9BAC824B04A51909810ABA5E0BB44 Ref B: MNZ221060610007 Ref C: 2024-09-01T20:05:40Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:39 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"error":{"code":"ParentResourceNotFound","message":"Failed to perform 'read' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found."}}
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/********-****-****-****-*******
msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 051a9713-240c-46ce-9ccf-18ba7008a11e
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '82'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"properties": {"NSRecords": [{"nsdname": "ns1-04.azure-dns.com."}], "TTL": 3600}}
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview HTTP/1.1" 404 309
cli.azure.cli.core.sdk.policies: Response status: 404
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '309'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'gateway'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'b8f06ac9-e75a-4552-b2c0-fe3fe4564e80'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'b8f06ac9-e75a-4552-b2c0-fe3fe4564e80'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:b8f06ac9-e75a-4552-b2c0-fe3fe4564e80'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: CA4B2E4C7A5247AEBA8E42D647B6A656 Ref B: MNZ221060610019 Ref C: 2024-09-01T20:05:40Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:40 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"error":{"code":"ParentResourceNotFound","message":"Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found."}}
cli.azure.cli.command_modules.network.custom: (ParentResourceNotFound) Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found.
Code: ParentResourceNotFound
Message: Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/----*****/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found.
Could not add delegation in 'abcdomain.stream'
cli.knack.cli: Event: CommandInvoker.OnTransformResult [<function _resource_group_transform at 0x737f370e0220>, <function _x509_from_base64_to_hex_transform at 0x737f370e02c0>]
cli.knack.cli: Event: CommandInvoker.OnFilterResult []
{
"etag": "10fb39ab-f925-423c-8abc-2b55cf9ce0dc",
"id": "/subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/vls4.abcdomain.stream",
"location": "global",
"maxNumberOfRecordSets": 10000,
"name": "vls4.abcdomain.stream",
"nameServers": [
"ns1-04.azure-dns.com.",
"ns2-04.azure-dns.net.",
"ns3-04.azure-dns.org.",
"ns4-04.azure-dns.info."
],
"numberOfRecordSets": 2,
"resourceGroup": "vlscanadacentral",
"tags": {},
"type": "Microsoft.Network/dnszones",
"zoneType": "Public"
}
cli.knack.cli: Event: Cli.SuccessfulExecute []
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x737f3708ef20>]
az_command_data_logger: exit code: 0
cli.main: Command ran in 5.687 seconds (init: 0.073, invoke: 5.614)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 3799 in cache
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "/opt/az/bin/python3 /opt/az/lib/python3.11/site-packages/azure/cli/telemetry/init.py /home/abc/.azure"
telemetry.process: Return from creating process
telemetry.main: Finish creating telemetry upload process.
Expected behavior
As per documentation and portal behavior, child dns zone should be able to operate successfully even if not created in the same group as the parent zone.
Environment Summary
test: az --version
azure-cli 2.63.0
core 2.63.0
telemetry 1.1.0
Extensions:
serial-console 1.0.0b1
ssh 2.0.5
vm-repair 1.0.9
Dependencies:
msal 1.30.0
azure-mgmt-resource 23.1.1
Python location '/opt/az/bin/python3'
Extensions directory '/home/esv/.azure/cliextensions'
Python (Linux) 3.11.8 (main, Jul 31 2024, 03:39:39) [GCC 11.4.0]
Legal docs and information: aka.ms/AzureCliLegal
Your CLI is up-to-date.
Additional context
nothing to add
Describe the bug
when using
az network dns zone create --name child.myname.com --resource-group mynewgroup --parent myname.comazcli returns an error message indicating that the parent zone can not be found if the parent is not in the same resource group as the new child zone.resource is created but it does not perform correct DNS resolution.
Related command
az network dns zone createErrors
(ParentResourceNotFound) Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptionsxxxxxx/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/xxxxxxx.stream' could not be found.
Code: ParentResourceNotFound
Message: Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/xxxxxxxx/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/xxxxxxstream' could not be found.
Issue script & Debug output
cli.knack.cli: Command arguments: ['network', 'dns', 'zone', 'create', '-g', 'vlscanadacentral', '--name', 'vls4.abcdomain.stream', '--parent', 'abcdomain.stream', '--debug']
cli.knack.cli: init debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x737f37e0bf60>, <function OutputProducer.on_global_arguments at 0x737f37db6160>, <function CLIQuery.on_global_arguments at 0x737f37df3c40>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'network': ['azure.cli.command_modules.network', 'azure.cli.command_modules.privatedns']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: network 0.302 117 359
cli.azure.cli.core: privatedns 0.006 14 60
cli.azure.cli.core: Total (2) 0.308 131 419
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name Load Time Groups Commands Directory
cli.azure.cli.core: Total (0) 0.000 0 0
cli.azure.cli.core: Loaded 130 groups, 419 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : network dns zone create
cli.azure.cli.core: Command table: network dns zone create
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x737f3708eca0>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/abc/.azure/commands/2024-09-01.16-05-35.network_dns_zone_create.480128.log'.
az_command_data_logger: command args: network dns zone create -g {} --name {} --parent {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x737f370e3240>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x737f370e32e0>, <function register_cache_arguments..add_cache_arguments at 0x737f370e3420>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x737f37db6200>, <function CLIQuery.handle_query_parameter at 0x737f37df3ce0>, <function register_ids_argument..parse_ids_arguments at 0x737f370e3380>]
cli.azure.cli.core.auth.persistence: build_persistence: location='/home/abc/.azure/msal_token_cache.json', encrypt=False
cli.azure.cli.core.auth.binary_cache: load: /home/abc/.azure/msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/********-****-****-****-************
msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={}
msal.application: Found 1 RTs matching {'environment': 'login.microsoftonline.com', 'home_account_id': '.72f988bf-86f1-41af-91ab-2d7cd011db47', 'family_id': '1'}
msal.telemetry: Generate or reuse correlation_id: 0ae23551-018e-4e83-8d0a-15a9e98c153c
msal.application: Cache attempts an RT
urllib3.connectionpool: Starting new HTTPS connection (1): login.microsoftonline.com:443
urllib3.connectionpool: https://login.microsoftonline.com:443 "POST /----/oauth2/v2.0/token HTTP/1.1" 200 5904
msal.token_cache: event={
"client_id": "04b07795-8ddb-461a-bbee-02f9e1bf7b46",
"data": {
"claims": "{"access_token": {"xms_cc": {"values": ["CP1"]}}}",
"refresh_token": "",
"scope": [
"offline_access",
"https://management.core.windows.net//.default",
"openid",
"profile"
]
},
"environment": "login.microsoftonline.com",
"grant_type": "refresh_token",
"params": null,
"response": {
"access_token": "",
"client_info": "eyJ1aWQiOiI3YmMxMWNiNS0xMWVkLTRhZWQtODkyNi0zZjRmN2I2NmMyOGEiLCJ1dGlkIjoiNzJmOTg4YmYtODZmMS00MWFmLTkxYWItMmQ3Y2QwMTFkYjQ3In0",
"expires_in": 4421,
"ext_expires_in": 4421,
"foci": "1",
"id_token": "",
"scope": "https://management.core.windows.net//user_impersonation https://management.core.windows.net//.default",
"token_type": "Bearer"
},
"scope": [
"https://management.core.windows.net//user_impersonation",
"https://management.core.windows.net//.default"
],
"skip_account_creation": true,
"token_endpoint": "https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token"
}
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/vls4.abcdomain.stream?api-version=2023-07-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '22'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"location": "global"}
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/vls4.abcdomain.stream?api-version=2023-07-01-preview HTTP/1.1" 201 546
cli.azure.cli.core.sdk.policies: Response status: 201
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'private'
cli.azure.cli.core.sdk.policies: 'Content-Length': '546'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'ETag': '10fb39ab-f925-423c-8abc-2b55cf9ce0dc'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'X-Powered-By': 'ASP.NET'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-resource-requests': '11999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '9a142299-d5b7-40aa-a942-d937f6d6d9d7'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:9a142299-d5b7-40aa-a942-d937f6d6d9d7'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: F36BC7EC7232429EB0E0C1F3831B9B17 Ref B: MNZ221060610035 Ref C: 2024-09-01T20:05:36Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:39 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"id":"/subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/vls4.abcdomain.stream","name":"vls4.abcdomain.stream","type":"Microsoft.Network/dnszones","etag":"10fb39ab-f925-423c-8abc-2b55cf9ce0dc","location":"global","tags":{},"properties":{"maxNumberOfRecordSets":10000,"maxNumberOfRecordsPerRecordSet":null,"nameServers":["ns1-04.azure-dns.com.","ns2-04.azure-dns.net.","ns3-04.azure-dns.org.","ns4-04.azure-dns.info."],"numberOfRecordSets":2,"zoneType":"Public"}}
cli.azure.cli.command_modules.network.custom: Attempting to add delegation in the parent zone
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/********-****-****-****-*******
msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 3b8d9361-9820-4e26-b420-66f832f0b72f
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview HTTP/1.1" 404 308
cli.azure.cli.core.sdk.policies: Response status: 404
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '308'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'gateway'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'c7be9b4d-9347-43e2-ae32-a6f2afaa57b8'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'c7be9b4d-9347-43e2-ae32-a6f2afaa57b8'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:c7be9b4d-9347-43e2-ae32-a6f2afaa57b8'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 71A9BAC824B04A51909810ABA5E0BB44 Ref B: MNZ221060610007 Ref C: 2024-09-01T20:05:40Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:39 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"error":{"code":"ParentResourceNotFound","message":"Failed to perform 'read' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found."}}
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/********-****-****-****-*******
msal.authority: openid_config("https://login.microsoftonline.com/********-****-****-****-************/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/********-****-****-****-************/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/********-****-****-****-************/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/********-****-****-****-************/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 051a9713-240c-46ce-9ccf-18ba7008a11e
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/********-****-****-****-************/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '82'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '8cc9d173-689d-11ef-a004-41ddc6359c94'
cli.azure.cli.core.sdk.policies: 'CommandName': 'network dns zone create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '-g --name --parent --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.63.0 (DEB) azsdk-python-core/1.28.0 Python/3.11.8 (Linux-6.8.0-40-generic-x86_64-with-glibc2.35)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"properties": {"NSRecords": [{"nsdname": "ns1-04.azure-dns.com."}], "TTL": 3600}}
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnsZones/abcdomain.stream/NS/vls4?api-version=2023-07-01-preview HTTP/1.1" 404 309
cli.azure.cli.core.sdk.policies: Response status: 404
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '309'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'gateway'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'b8f06ac9-e75a-4552-b2c0-fe3fe4564e80'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'b8f06ac9-e75a-4552-b2c0-fe3fe4564e80'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'EASTUS2:20240901T200540Z:b8f06ac9-e75a-4552-b2c0-fe3fe4564e80'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: CA4B2E4C7A5247AEBA8E42D647B6A656 Ref B: MNZ221060610019 Ref C: 2024-09-01T20:05:40Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Sun, 01 Sep 2024 20:05:40 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"error":{"code":"ParentResourceNotFound","message":"Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found."}}
cli.azure.cli.command_modules.network.custom: (ParentResourceNotFound) Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found.
Code: ParentResourceNotFound
Message: Failed to perform 'write' on resource(s) of type 'dnszones/NS', because the parent resource '/subscriptions/----*****/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/abcdomain.stream' could not be found.
Could not add delegation in 'abcdomain.stream'
cli.knack.cli: Event: CommandInvoker.OnTransformResult [<function _resource_group_transform at 0x737f370e0220>, <function _x509_from_base64_to_hex_transform at 0x737f370e02c0>]
cli.knack.cli: Event: CommandInvoker.OnFilterResult []
{
"etag": "10fb39ab-f925-423c-8abc-2b55cf9ce0dc",
"id": "/subscriptions/----/resourceGroups/vlscanadacentral/providers/Microsoft.Network/dnszones/vls4.abcdomain.stream",
"location": "global",
"maxNumberOfRecordSets": 10000,
"name": "vls4.abcdomain.stream",
"nameServers": [
"ns1-04.azure-dns.com.",
"ns2-04.azure-dns.net.",
"ns3-04.azure-dns.org.",
"ns4-04.azure-dns.info."
],
"numberOfRecordSets": 2,
"resourceGroup": "vlscanadacentral",
"tags": {},
"type": "Microsoft.Network/dnszones",
"zoneType": "Public"
}
cli.knack.cli: Event: Cli.SuccessfulExecute []
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x737f3708ef20>]
az_command_data_logger: exit code: 0
cli.main: Command ran in 5.687 seconds (init: 0.073, invoke: 5.614)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 3799 in cache
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "/opt/az/bin/python3 /opt/az/lib/python3.11/site-packages/azure/cli/telemetry/init.py /home/abc/.azure"
telemetry.process: Return from creating process
telemetry.main: Finish creating telemetry upload process.
Expected behavior
As per documentation and portal behavior, child dns zone should be able to operate successfully even if not created in the same group as the parent zone.
Environment Summary
test: az --version
azure-cli 2.63.0
core 2.63.0
telemetry 1.1.0
Extensions:
serial-console 1.0.0b1
ssh 2.0.5
vm-repair 1.0.9
Dependencies:
msal 1.30.0
azure-mgmt-resource 23.1.1
Python location '/opt/az/bin/python3'
Extensions directory '/home/esv/.azure/cliextensions'
Python (Linux) 3.11.8 (main, Jul 31 2024, 03:39:39) [GCC 11.4.0]
Legal docs and information: aka.ms/AzureCliLegal
Your CLI is up-to-date.
Additional context
nothing to add