Support for disabling of AutoResolveIntegrationRuntime in azurerm_data_factory

m4r74 commented 3 years ago

Community Note

Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Provide a way of disabling a Managed Virtual Network on the default AutoResolveIntegrationRuntime. Currently the ADF will be created with it enabled by default and there is no way of removing it post deployment of ADF.

A parameter to disable this will allow for ensuring that environments which must control the outbound connectivity can deploy and manage ADF via Terraform and not via other means.

This feature is currently supported on the Azure Portal.

New or Affected Resource(s)

azurerm_data_factory

Potential Terraform Configuration

resource "azurerm_data_factory" "example" {
  name                = "example"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  default_integration_runtime_enabled = false
}

default_integration_runtime_enabled - (Optional) Is the default Integration Runtime enabled? Defaults to true.

References

0000

m4r74 commented 3 years ago

Any chances of having this one visited? Leaving the AutoResolveIntegrationRuntime in place allows developers to use it in the linked services and push data to literally anywhere (there is no data exfiltration protection in ADF)

haveyoumetcp commented 1 year ago

Currently to my knowledge you can't even disable this in ADF. So, terraform isn't going to be able to disable it. I believe this would need to be an ADF feature request.

m4r74 commented 1 year ago

Currently to my knowledge you can't even disable this in ADF. So, terraform isn't going to be able to disable it. I believe this would need to be an ADF feature request.

You can't currently disable it within your existing ADF instance but it can be disabled during creation

haveyoumetcp commented 1 year ago

Currently to my knowledge you can't even disable this in ADF. So, terraform isn't going to be able to disable it. I believe this would need to be an ADF feature request.

You can't currently disable it within your existing ADF instance but it can be disabled during creation

That's interesting, I have never seen that was an option.

hashicorp / terraform-provider-azurerm