microsoft / microsoft/AzureTRE
Azure Firewall should be deployed with a management public IP to support future feature set
Open
Nobody has claimed this yet.
bundles
story
terraform
- Dominant language
- Python
- Stars
- 235
- Forks
- 192
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 13
Description
Description
As a TRE Administrator
I need every firewall deployment to have a management public IP
So that I can use upcoming Azure Firewall features
Acceptance criteria
- Deployments create a AzureFirewallManagementSubnet in the core virtual network, CIDR /26
- Create a second public IP for the firewall
- Specify the second public IP as the management IP.
- Provide a migration path which requires the firewall to be deallocated, additional IP assigned, and reallocated.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files or tests are named. Start by tracing the firewall deployment and core virtual network definitions, then inspect how public IPs and firewall allocation state are managed. Done means deployments create the management subnet, assign a second public IP as the management IP, and document or implement the required deallocation and reallocation migration path.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud, infrastructure
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100