PaloAltoNetworks / terraform-azurerm-vmseries-modules

Terraform Reusable Modules for VM-Series on Azure
https://registry.terraform.io/modules/PaloAltoNetworks/vmseries-modules/azurerm/latest
MIT License
49 stars 59 forks source link

refactor(module/appgw): Refactor module Application Gateway and adjust examples #345

Closed sebastianczech closed 11 months ago

sebastianczech commented 1 year ago

Description

PR delivers changes for Application Gateway:

Motivation and Context

307 , #325

How Has This Been Tested?

I checked that module using example included in PR.

Types of changes

Checklist

sebastianczech commented 1 year ago

/help

ChatOPS built in help:

Currently supported commands include:

The 1st command does not take arguments, the remaining take two:

Examples:

# run idempotence tests on listed modules with Terraform versions: 1.2 (latest patch available), 1.4 (latest patch available), 1.5.4.
/idempotence paths="examples/common_vmseries examples/panorama_standalone" tf_version="1.2 1.4 1.5.4"
# run validation tests with the latest available Terraform version on listed modules.
/validate paths="modules/vmseries modules/vnet examples/dedicated_vmseries"
sebastianczech commented 1 year ago

/plan paths="examples/common_vmseries examples/common_vmseries_and_autoscale examples/dedicated_vmseries examples/dedicated_vmseries_and_autoscale examples/virtual_network_gateway examples/appgw"

Testing job ID: 6584100272 Job result: FAILURE

sebastianczech commented 1 year ago

/plan paths="examples/common_vmseries examples/common_vmseries_and_autoscale examples/dedicated_vmseries examples/dedicated_vmseries_and_autoscale examples/virtual_network_gateway examples/appgw"

Testing job ID: 6584150967 Job result: FAILURE

sebastianczech commented 1 year ago

/plan paths="examples/common_vmseries examples/common_vmseries_and_autoscale examples/dedicated_vmseries examples/dedicated_vmseries_and_autoscale examples/virtual_network_gateway examples/appgw"

Testing job ID: 6584181839 Job result: SUCCESS

sebastianczech commented 1 year ago

/idempotence paths="examples/common_vmseries examples/common_vmseries_and_autoscale examples/dedicated_vmseries examples/dedicated_vmseries_and_autoscale examples/virtual_network_gateway examples/appgw"

Testing job ID: 6584225370 Job result: FAILURE

sebastianczech commented 1 year ago

/idempotence paths="examples/dedicated_vmseries examples/virtual_network_gateway"

Testing job ID: 6584818703 Job result: FAILURE

acelebanski commented 11 months ago

Deploying Application Gateway in WAFv2 SKU will fail. Adding this block to module's main.tf should solve the issue:

  waf_configuration {
    enabled          = var.waf_enabled
    firewall_mode    = "Detection"
    rule_set_type    = "OWASP"
    rule_set_version = "3.2"
  }
sebastianczech commented 11 months ago

Deploying Application Gateway in WAFv2 SKU will fail. Adding this block to module's main.tf should solve the issue:

  waf_configuration {
    enabled          = var.waf_enabled
    firewall_mode    = "Detection"
    rule_set_type    = "OWASP"
    rule_set_version = "3.2"
  }

Yes, thank you for feedback. I added support for WAF in Application Gateway: https://github.com/PaloAltoNetworks/terraform-azurerm-vmseries-modules/commit/f9c1b6f08089ebbf7099aca351596363950ce553