microsoft / microsoft/AzureTRE
Make firewall allow-list for workspace VMs customisable
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 235
- Forks
- 192
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 13
Description
Description
As a TRE Administrator
I want to be able to supply additional FQDNs to be allowed outbound access in the firewall
So that additional sites can be allowed access from workspace VMs (e.g. to add additional CRL verification URLs)
(based on https://github.com/microsoft/AzureTRE/pull/2694#discussion_r997010456)
Acceptance criteria
- Additional allowed FQDNs can be specified in the firewall to allow access for workspace VMs
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the existing firewall configuration and workspace VM deployment paths in the AzureTRE repository. Trace how outbound FQDN allow-lists are currently defined and configured. Done means a TRE Administrator can supply additional FQDNs and workspace VMs can reach those sites, including CRL verification URLs.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, python
- Domain
- cloud, infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100