If vnet injection is not used, the connection could be established by setting up an init script with azure private resolver as nameserver.

​

#!/bin/bash

mv /etc/resolv.conf /etc/resolv.conf.orig

echo nameserver <your dns server ip> | sudo tee --append /etc/resolv.conf