Database deployment using Azure DevOps when the database is on a private virtual network

Question

I have got a SQL server database in azure on a private network; I would like to set up a database deployment function. As the database is no longer on a public endpoint. How can I deploy SQL changes onto the SQL server database without building a self-hosted agent ?

Thanks in advance.

Answer 1

As far as I know there are 3 possible solutions:

• allow Microsoft services to connect to the public endpoint of your database server
• in your deployment pipeline, grab the IP address of the agent and automatically add that to the firewall rules of your database server. After deployment automatically remove the agent IP address from the firewall again.
• use a self-hosted pipeline agent (https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops&tabs=browser)

The last one is the only solution that does not (temporarily) open you database firewall to the outside world.