Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add option for forced tunneling through TRE's Firewall #4238

Merged

Conversation

yuvalyaron
Copy link
Collaborator

Resolves #4237

What is being addressed

Added the option for force tunnel TRE's Firewall to an external firewall

How is this addressed

  • Added firewall_force_tunnel_ip parameter to rp_bundle_values, when set, the following are created:
    • A route table to direct TRE traffic to the specified IP.
    • A public IP for firewall management.

After that, users have to manually connect TRE's VNet to the external firewall (e.g. through VNet Peering).

Copy link

github-actions bot commented Dec 31, 2024

Unit Test Results

0 tests   0 ✅  0s ⏱️
0 suites  0 💤
0 files    0 ❌

Results for commit c8d9dbc.

♻️ This comment has been updated with latest results.

@yuvalyaron yuvalyaron marked this pull request as ready for review January 6, 2025 15:46
@marrobi marrobi requested a review from Copilot January 7, 2025 16:31
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot reviewed 5 out of 13 changed files in this pull request and generated 2 comments.

Files not reviewed (8)
  • Makefile: Language not supported
  • templates/shared_services/firewall/parameters.json: Language not supported
  • templates/shared_services/firewall/template_schema.json: Language not supported
  • templates/shared_services/firewall/terraform/firewall.tf: Language not supported
  • templates/shared_services/firewall/terraform/routetable.tf: Language not supported
  • templates/shared_services/firewall/terraform/variables.tf: Language not supported
  • .github/workflows/build_validation_develop.yml: Evaluated as low risk
  • .github/workflows/codeql-analysis.yml: Evaluated as low risk

docs/tre-admins/configure-firewall-force-tunneling.md Outdated Show resolved Hide resolved
docs/tre-admins/configure-firewall-force-tunneling.md Outdated Show resolved Hide resolved
Copy link
Member

@marrobi marrobi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Thank you!

@yuvalyaron
Copy link
Collaborator Author

/test

Copy link

github-actions bot commented Jan 7, 2025

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/12656391688 (with refid 4f77b821)

(in response to this comment from @yuvalyaron)

@yuvalyaron yuvalyaron enabled auto-merge (squash) January 7, 2025 18:25
@yuvalyaron yuvalyaron merged commit 97debdc into microsoft:main Jan 7, 2025
12 checks passed
@yuvalyaron yuvalyaron deleted the 4237-support-firewall-force-tunnel branch January 7, 2025 19:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add Option to Force Tunnel TRE's Firewall
4 participants