GitHub CI/CD cannot deploy to Azure SQL as it cannot add firewall rule due to "deny public network access" being set to Yes

Tinu Oommen 21

I have an Azure SQL server where I wish to deploy my database via dacpac using GitHub CI/CD. I am using the Azure SQL Deploy action with Service Principal for Azure login action

Due to policy restrictions on the client side, the "Deny Public Network Access" is always enabled and therefore while deploying even though the service principal login works, the GitHub action is unable to add the IP Address to the firewall rule.

We are using Self-Hosted GitHub runners. Is there any workaround to deploying the database via CI/CD under such circumstances where we cannot add the firewall rule to whitelist the agent/runners IP Address?

Oury Ba-MSFT 16,471 Reputation points Microsoft Employee

2022-03-25T22:58:29.687+00:00

@Tinu Oommen Thank you for posting your question on Microsoft Q&A and for using Azure Services.

In my understanding you are not able to deploy your Azure SQL database via DACPAC using GitHub CI/CD. Please let me know if my understanding is not correct.

If the Azure SQL is configured to allow access to Azure Services, that should be enough. Doing that the GitHub actions will not try to create a new firewall rule and should work.

Regards,
Oury
Oury Ba-MSFT 16,471 Reputation points Microsoft Employee

2022-04-01T23:05:06.827+00:00

@Tinu Oommen Could you please also check if the 2 pre-requisites are done.

sqlcmd in mssql-tools: https://learn.microsoft.com/sql/linux/sql-server-linux-setup-tools
sqlpackage: https://learn.microsoft.com/sql/tools/sqlpackage/sqlpackage-download

Regards,
Oury
TM 0 Reputation points

2023-04-10T23:11:02.6433333+00:00

I am actually having same issue. My pipeline worked fine in Nov. 2022 with just Allow Azure Services, however I am getting this same error while trying to run it.
Oury Ba-MSFT 16,471 Reputation points Microsoft Employee

2023-05-01T17:23:26.7033333+00:00

TM

Could you please open a new thread.