Feature request-TLS Inspection feature on Azure Firewall

[sharmilamusunuru]

Is there an existing issue for this?

• [X] I have searched the existing issues

Community Note

• Please vote on this issue by adding a :thumbsup: reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

We are looking to enable TLS inspection on the Azure firewall premium and the issue raised to track this

New or Affected Resource(s

azurerm_firewall

Potential Configuration file

No response

References

No response

[LaurentLesle]

Need more details on what is needed + proposition of the potential configuration file

[lbehm]

Something like this was needed:

Sourced from application_gateway.tf for tls_certificate:

  dynamic "tls_certificate" {
    for_each = try(var.settings.tls_certificate, null) == null ? [] : [1]

    content {
      name                = var.settings.tls_certificate.name
      key_vault_secret_id = var.keyvault_certificates[var.settings.tls_certificate.name].secret_id
    }
  }

and for identity:

  dynamic "identity" {
    for_each = try(var.settings.identity, null) == null ? [] : [1]

    content {
      type         = "UserAssigned"
      identity_ids = local.managed_identities
    }
  }