Azure / Azure/Azure-Landing-Zones
The "do_not_verify_remote_gateways" flag should be exposed in the hubnetworking module
- Dominant language
- PowerShell
- Stars
- 97
- Forks
- 70
- Avg merge
- 3d 1h
- Merged PRs (30d)
- 7
Description
### Check for previous/existing GitHub issues
- [x] I have checked for previous/existing GitHub issues
### Issue Type?
I'm not sure
### (Optional) Module Version
0.9.0
### (Optional) Correlation Id
_No response_
### Description
The "do_not_verify_remote_gateways" flag should be exposed in the hubnetworking module.
Scenario:
We deployed a peered mesh of 4 hubs.
In one of the hubs, we also deployed an ExpressRoute Gateway and Azure Route Server (from the AVM modules also) to allow communication with an Azure VMware Service environment.
Observed behavior:
For the peerings *for this hub only*, on every terraform apply, the doNotVerifyRemoteGateways property gets changed from true to false (false is the default in hubnetworking) but something (Route Server possibly?) changes it back to true? There are no issues with the other peerings.
If the attribute (available in the virtualnetwork module) was exposed, we could set it to true which should resolve the issue. I did not find much additional information about the usage of the attribute.
Contributor guide
Research direction
Start by comparing the hubnetworking module's inputs with the virtualnetwork module, where do_not_verify_remote_gateways is already available. Trace how hub peerings pass this setting, expose the attribute in hubnetworking, and verify that setting it to true is retained in the Terraform plan for the affected hub.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, terraform
- Domain
- cloud, infrastructure, networking
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100