Граф коммитов

51 Коммитов

Автор SHA1 Сообщение Дата
Marcus Robinson 8b762a97e0
Enable Workspace owners to create Airlock requests and remove need for email (#3988)
* Enable Workspace owners to create Airlock requests and remove need for email

* Update versions

* Fix linting.

* add additonal test.

* Update CHANGELOG.md

* Update version.txt

---------

Co-authored-by: Tim Allen <tim.allen@cloudkubed.com>
2024-06-24 12:32:48 +01:00
Jonny Rylands 63ee9358b8
Expose FIREWALL_SKU as environment variable & support start/stop of SKU Basic Firewall (#3975)
* Expose FIREWALL_SKU as environment variable & support start/stop of SKU Basic Firewall

* Fix lint / build validation issues

* Fix Lint issue & improve documentation on FIREWALL_SKU as per @marrobi

* Fix build validation:  update core build version number

* #3975 Increment minor version numbers as per @tamirkamara review
2024-06-24 10:20:09 +01:00
Tim Allen 73944ed72e
Core provider update (#3991)
* Update clean_validation_envs.yml

* update

* update BRANCH_LAST_ACTIVITY_IN_HOURS_FOR_STOP: 8

* update

* rest activity

* update version

* pin provider

* add in premium_messaging_partitions for sb

* update type

* update other providers

* remove deprecated attributes

* more depricated attributes

* reset

* add in tf lock
2024-06-21 14:10:43 +00:00
Tim Allen 8d9703920c
Add Key Vault purge protection variable (#3952)
* Update clean_validation_envs.yml

* update

* update BRANCH_LAST_ACTIVITY_IN_HOURS_FOR_STOP: 8

* add new variable

* update to allow kv var to be optional

* tf format

* Update clean_validation_envs.yml
2024-05-29 12:32:05 +01:00
Jonny Rylands c8e5ed39fb
Remove TLS1.0/1.1 support. Resolves #3914 (#3916) 2024-05-01 17:22:19 +00:00
Tim Allen cb59c99233
Update Resource processor Ubuntu Image (#3902)
* Update clean_validation_envs.yml

* update

* update BRANCH_LAST_ACTIVITY_IN_HOURS_FOR_STOP: 8

* update core resource processor image

* remove clean env

* update version

* update changelog
2024-04-12 09:01:26 +01:00
wojciechcloudkubed bc2f233216
Update "Azure AD" references to "Microsoft Entra ID" (#3873)
* rename Azure AD to Microsoft Entra Workforce ID

* update Azure Active Directory to Microsoft Entra Workforce ID

* replace

* update version

* change stale version

* update from stale

* update version

* update readme

* Microsoft Entra Workforce ID -> Microsoft Entra ID

* AAD -> Microsoft Entra ID

* Delete .devcontainer/devcontainer.json

* Revert "Delete .devcontainer/devcontainer.json"

This reverts commit 5dd6d5c265.

* revert code changes

* remove double names

* update version

* go back version

* api update version

* revert for linting

* revert test linting

* fix linting

* roll back linting

* increase line length

* fix linting

* fix formatting

* fix lintin 3

* update urls

* update aad urls

---------

Co-authored-by: Tim Allen <tim.allen@cloudkubed.com>
2024-04-11 08:50:09 +00:00
Marcus Robinson 21dbd2404c
Add network rule set for Service Bus namespace (#3858) 2024-02-28 13:22:54 +00:00
Mike Harding 31960894e1
Updates to all porter bundles to build docker images for amd64 platform from arm64 machines locally (#3827)
* Updated porter bundle docker templates and runtime image to build to amd64 platform on arm64 dev machines

* Corrected comments incorrectly touched by find/replace

* added ignore for DL3029 hadolint validation

* added new line to hadolint config

* removed white space

* Try fix monitoring dependancy issues

* updated changelog

* Try fix monitoring dependancy issues try 2

* increase versions

---------

Co-authored-by: Michael Harding <mikeyharding@gmail.com>
Co-authored-by: marrobi <marrobi@microsoft.com>
2024-01-23 12:13:39 +00:00
Marcus Robinson 9c59b8020a
Move to using managed identity for auth to CosmosDB. (#3806) 2024-01-04 00:35:45 +00:00
dusan-ilic-mhra 7b9927cdb0
Switch to structured firewall logs (#3816) 2023-12-22 13:15:54 +00:00
Marcus Robinson c382f3daa0
Switch to Open Telemetry for logging (#3762) 2023-12-07 16:12:25 +00:00
Anat Balzam d5cd77b3ef
Enable malware scanner - Defender for Storage (#3784)
* enable defender for storage on TRE core

* allow malware scanning only for import

* cr comments

* cr comments

* fix deletion issue

* add docs on malware scanning

* disable sensitiveDataDiscovery

---------

Co-authored-by: anatbal <anatbal@example.com>
2023-11-20 15:45:38 +00:00
Marcus Robinson a59e8078c3
Update get Shared Services route so full resource gets returned for admins (#3717)
* Update so full resource gets returned for admins

* Update AzureRM version

* Update tf lock file

* up TF provider to see if kv issue resolved

* Update lock file

* Update core version
2023-09-22 11:05:24 +00:00
Martin Peck fb4a3a1971
Upgrade Airlock and Apply FW Rule for Airlock (#3682)
* update function app runtime

* create app rule for airlock

* Increase core version

* Testing e2e shared service fix for failed firewall deployments.

* Add admin_connection_uri as output (#3684)

* remove retention policies from all resources

* update version numbers

* As using dev container base image with none root user this is redundant.

* Revert command changes, try setting user ID, add debug commands

* debug perms current dir

* revert debug commands

---------

Co-authored-by: marrobi <marrobi@microsoft.com>
2023-08-24 16:34:53 +01:00
Marcus Robinson 2c872cf427
Apply missing lifecycle blocks. (#3670) 2023-08-14 14:04:31 +00:00
Nayeem Abdullah c3f144f959
terraform_typed_variables turn on (#3660) 2023-08-14 11:13:36 +01:00
Marcus Robinson ffccc84aa4
Fix ability to debug resource processor locally (#3654) 2023-08-11 08:18:08 -05:00
Marcus Robinson b8c7f0b1bc
Upgrade airlock review and unrestricted workspaces to base v0.12.0 (#3659) 2023-08-08 16:54:29 +00:00
Marcus Robinson 6ffc341b0c
Changes to fix dependency issues and app insights TF issues (#3581) 2023-07-20 19:05:41 +00:00
Tamir Kamara b4831eb19e
Terraform null resources to terraform_data (#3429)
TF null resources to tf_data, new provider ver
2023-04-13 14:31:32 +03:00
LizaShak d316f1ad1f Integration and versions upgrade 2023-04-03 20:05:58 +00:00
Liza Shakury 16fa72e9d4 Upgrade terraform_azurerm_environment module version (#3402)
* Upgrade module version

* Upgrade core version
2023-04-03 09:53:40 +00:00
Yuval Yaron 7b81ebe952 Remove the usage of azure-cli-core library (#3381)
* remove usage of azure.cli.core from airlock processor

* use urllib for parsing url

* update the way we get webapp_suffix  - to match the most recent  version of the module

* remove usage of azure.cli.core from resource processor

* remove usage of azure.cli.core from the api

* fix usage of terraform module terraform_azurerm_environment_configuration

* remove ARM_ENVIRONMENT where it's not used

* update versions

* remove unused os import from tests

* add credential_scopes to the config

* fix usage of RESOURCE_MANAGER_ENDPOINT in CREDENTIAL_SCOPES

* change the github source for terraform_azurerm_environment_configuration

* temporarily remove the version for terraform_azurerm_environment_configuration

* temporarily use the hash of the latest commit

* temporarily use the hash of the latest commit instead of version 1.0.1 of terraform_azurerm_environment_configuration

* update core
2023-04-03 09:52:14 +00:00
Liza Shakury 5acb0a19eb Use versioned terraform module (#3383)
* Use versioned terraform module

* Upgrade core version
2023-04-03 09:50:47 +00:00
Yuval Yaron 909721ba50 Support Gov cloud in CI/CD (#3366)
* fix typos

* use az cloud show to get AZ_CLOUD_ENVIRONMENT

* set TRE_URL and AZ_CLOUD_ENVIRONMENT in action.yml

* add AZURE_ENVIRONMENT to ci/cd - it's required for az login

* set cloud for CI in check_dependencies.sh

* remove hardcoded acr name from CI-CD + fix TRE_URL

* fix ACR domain suffix

* fix ACR_DOMAIN_SUFFIX not being evaluated lazily

* change acr_name assignment

* add  AZURE_ENVIRONMENT to the docs

* remove OmsAgentForLinux extension

* pass arm_environment as terraform var

* Add private links

* Support for vm

* Upgrade versions and services

* rename AZ_CLOUD_ENVIRONMENT to AZURE_ENVIRONMENT

* Fix terraform formatting

* Source module from modules repository

* Fix terraform format

* Temorary Disable versioning for module

* Remove arm env

* CR changes

* Fix lint issues

* Install git in devcontainer

* Remove from vm unused var

* Fix lint issues

* Install git in devcontainer

* remove duplicate git installation

* add default value to AZURE_ENVIRONMENT in CI

* update AZURE_ENVIRONMENT in ci/cd docs

* fix azure_env default assignment

* update core version

* fix tf lint errors by removing unused vars

* fix linting error in deploy_tre_reusable

* fix linting errors in deploy_tre_reusable

* fix linting errors in deploy_tre_reusable

---------

Co-authored-by: LizaShak <iliza@outlook.com>
2023-04-03 09:50:23 +00:00
Liza Shakury e2ce6d8a6e Change module repo (#3364) 2023-04-03 09:50:22 +00:00
Liza Shakury 017f2a9094 Private dns zone names sourced dynamically (#3352)
* Add private links

* Support for vm

* Upgrade versions and services

* Fix terraform formatting

* Source module from modules repository

* Fix terraform format

* Temorary Disable versioning for module

* Remove arm env

* CR changes

* Remove from vm unused var

* Fix lint issues

* Install git in devcontainer
2023-04-03 09:50:16 +00:00
Tamir Kamara 4b2f1d7cf0 Use the right MSI in the Resource Processor (#3347)
* RP uses right user-assigned managed identity

* core version
2023-04-03 09:49:49 +00:00
Anat Balzam f94384934a Support Airlock in GOV cloud (#3338)
* hardcoded storage endpoint

* fix unit tests, api hardcoded value

* bump api version

* support arm env in airlock processor

* rename

---------

Co-authored-by: Anat Balzam <anat@example.com>
2023-04-03 09:49:44 +00:00
Yuval Yaron f0290b9f3c Azure CLI should login to the right cloud (#3336)
* add env var AZ_CLOUD_ENVIRONMENT to control the az cli environment with default value of AzureCloud

* set Azure CLI cloud environment in the resource processor/vmss

* set azure cloud environment in templates

* set azure cloud in 'az login' of resource processor

* remove az_cloud_environment from config.yaml - instead infer it from arm_environment

* update template versions

* update version

* remove 'az cloud set' call and export AZ_CLOUD_ENVIRONMENT

* bump patch version instead of minor version

* add AZ_CLOUD_ENVIRONMENT to parameters.json

* update version

* update core version
2023-04-03 09:49:21 +00:00
Yuval Yaron 1ec3fdf3ed Remove hardcoded ACR URLs (#3330)
* remove hardcoded "azurecr.io" domain from scripts and terraform

* remove hardcoded ACR domain  from resource processor

* update resource processor version

* update core version

* align naming of acr domain suffix

* add method to get ACR name
2023-04-03 09:48:04 +00:00
Liza Shakury d957a0e7bc Pass additional params to clients (#3325)
* Pass authority to clients using cloud edpoints.

Co-authored-by: Yuval Yaron <43217306+yuvalyaron@users.noreply.github.com>

* Update resource_processor/shared/cloud.py

Co-authored-by: Yuval Yaron <43217306+yuvalyaron@users.noreply.github.com>

* AAD INSTANCE source from cloud settings (#3326)

* AAD instance sourced from cloud

* Fix auth

* Remove output

* Add the needed output

* CR changes

* Upgrade core version

* Use existing get cloud method

* Upgrade core

* Upgrade core

---------

Co-authored-by: Yuval Yaron <43217306+yuvalyaron@users.noreply.github.com>
Co-authored-by: Tamir Kamara <26870601+tamirkamara@users.noreply.github.com>
2023-04-03 09:46:58 +00:00
Anat Balzam 46beaee8a0 Application Gateway FQDN should be sourced dynamically (#3317)
* tf changes for tre_url dynamically

* e2e changes for tre_url dynamically

* bump core version

* lint tf

* fix dns zone for nexus

* remove hard coded url from scripts

* bump core version

* cr comments

* cr comments tf

* tre_url var location in config.yaml and validation

* nexus dns_zone migration

* fixing nexus_dns with migration script

* bump core version

* allow tre url to be http/https

---------

Co-authored-by: Anat Balzam <anat@example.com>
2023-04-03 09:46:31 +00:00
Tamir Kamara 9fc2fdaf27 Use Servicebus FQDN (#3332)
Use servicebus FQDN
2023-04-03 09:46:26 +00:00
Tamir Kamara 1e7d393423 Query for available diagnostic categories (#3328)
query for available diagnostic categories
2023-04-03 09:45:36 +00:00
Yuval Yaron cb1f4156aa Add ARM_ENVIRONMENT as an environment variable (#3318)
* add arm_environment to set the azure environment for terraform both locally and in the resource processor

* update resource processor version

* update core version
2023-04-03 09:43:13 +00:00
Anat Balzam c803987cf4 Bump azure plugins version for porter and use the new valut-url param (#3312)
* change porter plugin version

* change porter plugin version

* revert porter v0

---------

Co-authored-by: Anat Balzam <>
Co-authored-by: Anat Balzam <anat@example.com>
2023-04-03 09:43:13 +00:00
David Moore 969ab62bc7
RP_BUNDLE multiple values fix (#3343)
* added spacing to join and some test rp_bundle vals to the build to ensure breaks if it needs to

* bumped core v

* rp_bundles to secret
2023-03-16 14:00:22 +00:00
Tamir Kamara 2399c39402
standardize airlock storage private endpoints (#3231)
* standerdize airlock storage private endpoints

* core version
2023-02-19 17:39:31 +00:00
Tamir Kamara 19fe846084
ignore_chnages for log_analytics_destination_type (#3217) 2023-02-12 07:59:51 +00:00
Tamir Kamara ef7677243a
Upgrade AzureRM to 3.41.0 (#3185)
* Upgrade AzureRM to 3.41.0

* changelog
2023-02-02 18:18:45 +02:00
Tamir Kamara 4f17340aa3
Add Azure Monitor query pack and queries (#3151)
* Add Azure Monitor query pack and queries

* core version

* changelog

* core version
2023-01-31 17:06:50 +02:00
Anuj Parashar 35b486b100
Adding Azure databricks workspace service (#1857)
* Azure Databricks TRE workspace service

Co-authored-by: Guy Bertental <guybartal@gmail.com>
Co-authored-by: Tamir Kamara <26870601+tamirkamara@users.noreply.github.com>
Co-authored-by: Ross Smith <ross-p-smith@users.noreply.github.com>
Co-authored-by: Marcus Robinson <marrobi@microsoft.com>
2023-01-31 11:42:14 +02:00
Tamir Kamara 76a740a0be
Fix RP subnet migration (#3129) 2023-01-29 09:55:47 +02:00
Tamir Kamara c9c66b8b24
Move non-core DNS zones outside network module (#3119)
* non core dns zone migration

* tf fmt
2023-01-26 11:47:36 +02:00
Tamir Kamara 4fad438af7
Firewall Policy (#3107)
* azure firewall policy

* update changelog

* tf lint

* update changelog

* update changelog

* changelog

* Update templates/shared_services/firewall/porter.yaml
2023-01-24 18:25:04 +00:00
Tamir Kamara 95654cd06e
Support ip group names in dynamic firewall rules (#3089)
* Support ip group names in firewall rules

* changelog

* tf lint

* remove unused resources

* fix nexus test

* update test

* fix test

* update bundle versions

* fix certs

* fix certs

* disable certs_nexus test
2023-01-23 06:59:14 +00:00
Tamir Kamara c245a08be6
Serverless CosmosDB for new deployments (#3029)
* new state store/cosmos to serverless

* remove data objects

* changelog

* lint
2023-01-01 14:30:16 +02:00
Tamir Kamara b88715b294
Fix Airlock's private endpoint to storage (#3025)
fix airlock pe to storage
2022-12-27 16:56:06 +00:00