Support for IP Firewall rules for Azure Relay

[j-chao]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Support for adding Network Security rules for Azure Relay, as documented here.

New or Affected Resource(s)

• azurerm_relay_namespace

Potential Terraform Configuration

resource "azurerm_relay_namespace" "example" {
  name                = "example-relay"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name

  sku_name = "Standard"

  network_rulesets {
    default_action                 = "Deny"
    trusted_service_access_enabled = false

    virtual_network_rule {
      subnet_id                                       = var.subnet_id
      ignore_missing_virtual_network_service_endpoint = false
    }

    ip_rule {
      ip_mask = "1.1.1.1"
      action = "Allow"
    }

  tags = {
    source = "terraform"
  }
}

References

• https://docs.microsoft.com/en-us/azure/azure-relay/network-security

[ThamizhselvanThiruvenkadam]

• Need help on the Network Rulesets Public Network Access as well. network_rulesets { publicNetworkAccess = Enabled / Disabled default_action = "Deny" trusted_service_access_enabled = false

  virtual_network_rule { subnet_id = var.subnet_id ignore_missing_virtual_network_service_endpoint = false }

[RajanikanthGitHub]

Any update on this thread.

how to apply Network realted integrations to Azure Relay Namspace.?