Azure / Azure/Azure-Landing-Zones

The "do_not_verify_remote_gateways" flag should be exposed in the hubnetworking module

Open
#346 11 comments 0 reactions 0 assignees View on GitHub
Transfer From: TF avm-ptn-con-hs :arrow_right:
Dominant language
PowerShell
Stars
97
Forks
70
Avg merge
3d 1h
Merged PRs (30d)
7

Description

### Check for previous/existing GitHub issues

- [x] I have checked for previous/existing GitHub issues

### Issue Type?

I'm not sure

### (Optional) Module Version

0.9.0

### (Optional) Correlation Id

_No response_

### Description

The "do_not_verify_remote_gateways" flag should be exposed in the hubnetworking module.

Scenario:
We deployed a peered mesh of 4 hubs.
In one of the hubs, we also deployed an ExpressRoute Gateway and Azure Route Server (from the AVM modules also) to allow communication with an Azure VMware Service environment.

Observed behavior:
For the peerings *for this hub only*, on every terraform apply, the doNotVerifyRemoteGateways property gets changed from true to false (false is the default in hubnetworking) but something (Route Server possibly?) changes it back to true? There are no issues with the other peerings.

If the attribute (available in the virtualnetwork module) was exposed, we could set it to true which should resolve the issue. I did not find much additional information about the usage of the attribute.

Contributor guide

Open the contributing guide

Research direction

Start by comparing the hubnetworking module's inputs with the virtualnetwork module, where do_not_verify_remote_gateways is already available. Trace how hub peerings pass this setting, expose the attribute in hubnetworking, and verify that setting it to true is retained in the Terraform plan for the affected hub.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, terraform
Domain
cloud, infrastructure, networking
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.