-
Notifications
You must be signed in to change notification settings - Fork 148
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add option for forced tunneling through TRE's Firewall #4238
Add option for forced tunneling through TRE's Firewall #4238
Conversation
Unit Test Results0 tests 0 ✅ 0s ⏱️ Results for commit c8d9dbc. ♻️ This comment has been updated with latest results. |
…7-support-firewall-force-tunnel
…om/yuvalyaron/AzureTRE into 4237-support-firewall-force-tunnel
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Copilot reviewed 5 out of 13 changed files in this pull request and generated 2 comments.
Files not reviewed (8)
- Makefile: Language not supported
- templates/shared_services/firewall/parameters.json: Language not supported
- templates/shared_services/firewall/template_schema.json: Language not supported
- templates/shared_services/firewall/terraform/firewall.tf: Language not supported
- templates/shared_services/firewall/terraform/routetable.tf: Language not supported
- templates/shared_services/firewall/terraform/variables.tf: Language not supported
- .github/workflows/build_validation_develop.yml: Evaluated as low risk
- .github/workflows/codeql-analysis.yml: Evaluated as low risk
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. Thank you!
…om/yuvalyaron/AzureTRE into 4237-support-firewall-force-tunnel
/test |
🤖 pr-bot 🤖 🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/12656391688 (with refid (in response to this comment from @yuvalyaron) |
Resolves #4237
What is being addressed
Added the option for force tunnel TRE's Firewall to an external firewall
How is this addressed
firewall_force_tunnel_ip
parameter torp_bundle_values
, when set, the following are created:After that, users have to manually connect TRE's VNet to the external firewall (e.g. through VNet Peering).