FAZI request

PVSMS, Kartik 0 Reputation points
2026-08-26T09:46:53.0766667+00:00

Hi Team,

We're working on FAZI i.e foundational azure images.We've adopted the private-only pattern i.e we've been pointed towards and just need one piece of Azure Eng to be able to bake.

our request is to peer fazi-bake-vnet (in n0-linuxmgmt01-face-rg-01, westus2) to the Nike Azure hub in westus2  or whichever region already has a hub, FAZI is region agnostic. One-for-one what nike-windows-server/Bob OS Image-Pipeline's p6-wpsebob01-vnet-westeurope-01 has today (peered to p6-network01-hub-westeurope-01).

This is because FAZI's Packer bakes run on Jenkins BMX in AWS us-west-2. Nike backbone doesn't route AWS 10.9.0.0/16 → Azure 10.128.0.0/24 privately, so Packer times out at "Waiting for SSH". Other teams solved this by running their Packer worker inside Azure, peered to the hub. We're mirroring that exact pattern for Ubuntu: private-IP-only Jenkins agent in fazi-bake-vnet, no public IPs anywhere.

Specifics:

  • Subscription: n0-sub-linuxmgmt-01 (ebc8f1cd-25b1-43f7-8310-e441a14d59a3)
  • Resource group: n0-linuxmgmt01-face-rg-01
  • Local vnet: fazi-bake-vnet, address space 10.128.0.0/24, westus2, zero peerings today
  • Remote: whichever westus2 hub is your default vend for peered non-prod vnets

What happens after this lands, the FAZI SP applies Terraform that stands up a Standard_D4s_v3 Ubuntu VM in the peered vnet i.e one-for-one Bob's p6wapp00122. Then BMX enrolls it as a Jenkins agent i.e gotta raise a separate ticket to them, and we're baking.

Azure Virtual Network
Azure Virtual Network

An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.

0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.