Recently a DevOps team spin up an App with a Private Endpoint with an ingress URL of appname.thankfulpond-c4eb87cd.australiaeast.azurecontainerapps.io

We could not access this on the VNET as the DNS was not resolving this name

Turns out you need to add a Private DNS Zone for thankfulpond-c4eb87cd.australiaeast.azurecontainerapps.io

Link \ Add this Private DNS Zone to the right Vent

Then add a *.thankfulpond-c4eb87cd.australiaeast.azurecontainerapps.io A recording to this Zone pointing to the IP of the Container App Environment which means any Container App on this Container Environment Resolves