Граф коммитов

24 Коммитов

Автор SHA1 Сообщение Дата
Matt White 4d983f7780
feat!: ama (#968) 2024-06-17 13:01:21 +01:00
Mtsa fc666d1ce0
feat(connectivity): Add option to set allow_non_virtual_wan_traffic in express route gateway. (#914)
Co-authored-by: Miltos Tsatsakis <m.tsatsakis@kaizengaming.com>
2024-04-05 08:19:21 +01:00
lolorol c84e4e8dac
Add support for user managed identity for policy assignments (re-submission) (#867)
Co-authored-by: Luke Taylor <77284962+luke-taylor@users.noreply.github.com>
Co-authored-by: luke-taylor <lukejamestaylor98@outlook.com>
Co-authored-by: github-actions <action@github.com>
2024-03-13 10:00:05 +00:00
Matt White 565d8041f4
fix: threat_intelligence_allowlist (#907)
Co-authored-by: Hein Tonny Køien <hein.koien@blinq.no>
2024-03-04 11:32:55 +00:00
Luke Taylor 7d46177183
Add Routing Intent (#822)
Co-authored-by: github-actions <action@github.com>
Co-authored-by: Matt White <16320656+matt-FFFFFF@users.noreply.github.com>
2023-09-29 11:31:21 +01:00
Stephanie Lanius 7c4e47cd6e
Microsoft defender for Cloud policy update (#709) 2023-05-19 10:53:29 +01:00
Jared Holgate 2467832c3a
Policy Refresh April 2023 (#691)
Co-authored-by: github-actions <action@github.com>
Co-authored-by: Matt White <16320656+matt-FFFFFF@users.noreply.github.com>
2023-05-03 15:06:28 +01:00
Luke Taylor 21803674b7
Add Azure Firewall Basic SKU Support (#677)
Co-authored-by: github-actions <action@github.com>
2023-04-25 14:21:00 +01:00
Kevin Rowlandson 3fc9d286bc
Update parameter merge logic (#616)
* Update merge logic to per parameter scope
- as discussed in #607

* Update test framework to validate new merge logic

* Add updates to baseline_values.json

* Update release notes

* Update wiki docs

---------

Co-authored-by: github-actions <action@github.com>
2023-02-14 09:57:04 +00:00
Kevin Rowlandson 43858cb771
Update for release `v3.1.2` (#578)
* Fix #577 - incorrect default for `apipa_addresses`

* Update default values for other list items in schema

* Add logic to safely handle duplicate DNS zone entries
- Fix #577

* Update for release `v3.1.2`
2022-12-30 11:32:00 +00:00
Kevin Rowlandson 5203049cd9
Add new connectivity capabilities (#558)
* Add option for `azure_managed_disks` dns

* Remove sensitive value filtering
- as discussed in #499

* Update DNS link logic to fix #542

* Add test coverage for #542

* Update mesh peering logic
- as mentioned in #542

* Add additional DNS link logic to fix #549

* Add secure hub logic to fix #491

* Update release notes
2022-12-16 13:25:55 +00:00
Luis Alfonso Chaves fc68bdf873
Remove Activity Log solution (#554)
* Removed Activity Log solution from Terraform RI

* Add updates to baseline_values.json

* Removed some solutions to show custom deployment

* Changed the Example file for custom management resources deployment to match the portal image

* Fixed some linter error, extra spaces

* Update as per PR review comments
https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/pull/554#pullrequestreview-1216955018

* Update release notes

Co-authored-by: Luis Chaves <luchaves@microsoft.com>
Co-authored-by: github-actions <action@github.com>
Co-authored-by: Kevin Rowlandson <kevin.rowlandson@microsoft.com>
2022-12-16 09:56:31 +00:00
Kevin Rowlandson 72e149f1bd
Fix managed parameters for `Deploy-Private-DNS-Zones` (#547)
* Update parameters for `Deploy-Private-DNS-Zones` policy assignment

* Update enabled DNS zones to match policy assignment

* Update release notes

* Add updates to baseline_values.json

Co-authored-by: github-actions <action@github.com>
2022-12-12 16:55:51 +00:00
Kevin Rowlandson 4876c83e61
Update private DNS zones (#526)
* Add private DNS zones for `azure_data_health_data_services`

* Update private DNS zones for Azure Bot Service

* Add updates to baseline_values.json

Co-authored-by: github-actions <action@github.com>
2022-11-25 16:39:38 +00:00
Matt White 0319a29045
Add support for `optional()` types (#409)
* Add support for `optional()` types

* Add experimental `terratest` test framework

* Add new private DNS zones for private endpoint

* Update corresponding documentation

* Bump supported versions

Co-authored-by: Kevin Rowlandson <kevin.rowlandson@microsoft.com>
Co-authored-by: github-actions <action@github.com>
2022-11-23 14:34:48 +00:00
Kevin Rowlandson 134132c8a9
Update firewall configuration options (#516)
* Add new `azurerm_firewall_policy` settings
- `tls_certificate` (fixes #513)
- `sql_redirect_allowed`

* Update zone config for AzFW public IPs
- Fixes #447

* Add updates to baseline_values.json

Co-authored-by: github-actions <action@github.com>
2022-11-17 14:22:26 +00:00
Sacha Narinx 3e16e9d4b0
Remove deprecated Policy Assignments for Arc (#507)
* Remove Arc monitoring policy assignments from root

* Removing all Arc monitoring policy refs

* Add updates to baseline_values.json

* Cleaning up vars and docs

* Catching a couple of remaining Arc references

* Fix `terraform fmt` error

Co-authored-by: github-actions <action@github.com>
Co-authored-by: Kevin Rowlandson <kevin.rowlandson@microsoft.com>
2022-11-10 17:32:48 +00:00
Ben Taylor 86712dd8fa
Update private DNS zones for private endpoint (#481)
* Update private DNS zones for private endpoint

Co-authored-by: Ben Taylor <ben.taylor@ukfast.co.uk>
Co-authored-by: Kevin Rowlandson <kevin.rowlandson@microsoft.com>
Co-authored-by: github-actions <action@github.com>
2022-10-26 20:27:18 +01:00
Matt White 2fff77ea6a
feat!: implement hub network mesh peering (#429) 2022-08-12 14:24:31 +01:00
Kevin Rowlandson d29d51c9c1
Add SQL solutions (#396)
* Add SQL solutions to fix issue #387
+ SQLVulnerabilityAssessment
+ SQLAdvancedThreatProtection

* Add updates for #387 to Wiki

* Apply consistent format for notes in Wiki

* Add to upgrade guidance

* Prepare for release `v2.1.0`

* Add updates to baseline_values.json

Co-authored-by: github-actions <action@github.com>
2022-06-07 19:39:25 +01:00
Kevin Rowlandson 64898f2fb1
Patch code review (#390)
* Update to latset version of github/super-linter

* Resolve new linting errors

* Fix `actionlint` linting errors

* Add custom `tflint` configuration

* Test `tflint` with `v4.9.2` of super-linter

* Remove custom source and version for tflint

* Disable `azurerm` provider for `tflint`
as requires upstream fix
Revert super-linter version

* Add `plugin_dir` and rules config to `.tflint.hcl`

* Fix formatting

* Fix `tflint` linting errors
Improve consistent use of locals for empty values

* Bump super-linter version to `v4.9.4`
2022-05-30 12:42:32 +01:00
Kevin Rowlandson 246cf7de44
Fix multiple issues (#345)
* Cast `tomap()` to fix #340

* Add advanced input to fix #342

* Add logic to handle VPN GW generation to fix #333

* Add `advanced_vpn_settings`
- Fix #232
- Fix #334

* Custom `ip_configuration` disables PIP creation
- Fix #232

* Update to support provider version `v3.0.2`

* Link `secondary_location` to settings module

* Update to test VPN gateway without AZ

* Update resource type in ID prefix

* Update baseline for `v3.0.2` provider support

* Fix sensitive values error

* Update strategy to test using Terraform `v1.1.x`

* Update OPA guidance
2022-04-25 19:30:15 +01:00
Kevin Rowlandson 4b0c135159
Add Firewall Policy (#331)
* Add `azurerm_firewall_policy` resources

* Integrate `enable_dns_proxy` setting

* Add dependency for Firewall Policy

* Add DNS servers and align SKU settings

* Update baseline to include Firewall Policy updates

* Update debug output

* Add `dns_servers` and `sku_tier` to azfw config

* Update for `azure_firewall.config.dns_servers`

* Add zones to vwan fw to fix #336

* Update policy naming

* Update to reflect zones and updated policy names

* Enable custom names for public ips and fw policies

* Fix issue introduced by replacing `try()` with `lookup()`

* Add pip name locals to debug

* Additional Firewall Policy settings
2022-04-14 19:22:00 +01:00
Kevin Rowlandson 739a3f9053
Add VWAN deployment capability (#287)
* Add VWAN capabilities to upstream branch (#250)

* Initial MVP for virtual wan and hub resources
* Update resource dependencies
* Refactor to create dedicated resources for vwan
* Refactor to simplify for management resources
* Replace `try()` with `lookup()`
* Update custom settings for Virtual WAN
* Add DNS links for spokes connected to Virtual Hubs
* Add virtual hub connections

* Fix incorrect VPN gateway name (#251)

* Fix incorrect VPN gateway name

* Refactor test framework for VWAN additions (#265)

* Refactor test deployments

* Update minimum supported provider version

* Fix linting error

* Update root_name

* Update unit test pipeline

* Fix certificate path error

* Rename job display names

* Update e2e test pipeline

* Update location variable

* Remove unused TF_PLAN_OUT variable

* Update parallelism environment variable

* Update path for terraform destroy

* Increase job timeouts for e2e

* Update OPA value generator for pwsh

* Add `planned_values.json` for each test case

* Remove trailing whitespace

* Update OPA tests script for new framework

* Add OPA tasks to Unit Tests job

* Remove `.sh` script (to be unified with `.ps1` version)

* Refactor OPA installation scripts

* Update execution bit

* Update task names

* Add readme to test framework

* Add VWAN config to connectivity settings

* Remove unsupported tags object from config

* Update minimum supported version to fix #271

* Fix #271 error deleting firewall

* Updates to fix #272

* Fix formatting error on fix for #273

* Fix to prevent lock file versions error

* Update rego files to reflect changes for #272

* Updated for latest test framework plans

* Update conftest baseline

* Add opt-out for `terraform destroy`

* Update for remote backend configuration

* Update dependsOn for test jobs

* Update execution bit on script file

* Output variables to pipeline

* Update auth config for backend

* Update backend config for SPN auth

* Update comment

* Move random `root_id` generation to strategy job

* Add SPN credentials to backend configuration

* Do not try to overwrite readonly variable

* Rename function for linting error

* Remove `use_microsoft_graph` due to error

* Add `az logout` step

* Troubleshoot `terraform init` error

* Map dependent variables

* Add `az cli` login to init step

* Troubleshoot auth issue for `terraform init`

* Add `ARM_CLIENT_SECRET` to `terraform init` steps

* Add dependent variables to e2e test jobs

* Split e2e tests into multiple jobs

* Update condition in test loop

* Rename jobs

* Update timeout on clean-up

* Update condition format

* Update dependencies

* Update conditions

* Update conditions

* Update timeout and conditions for e2e tests

* Rename tasks

* Update logic for `terraform destroy`

* Update logic for `terraform destroy`

* Update condition

* Rename e2e clean-up job
2022-03-09 14:16:09 +00:00