@drunk-pulumi/azure 1.0.3 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/Aks/Helper.js +4 -3
- package/Aks/Identity.js +3 -3
- package/Aks/index.d.ts +8 -7
- package/Aks/index.js +73 -57
- package/Automation/index.d.ts +1 -1
- package/Automation/index.js +5 -5
- package/AzAd/EnvRoles.Consts.d.ts +11 -7
- package/AzAd/EnvRoles.Consts.js +43 -50
- package/AzAd/EnvRoles.d.ts +3 -3
- package/AzAd/EnvRoles.js +10 -10
- package/AzAd/Group.d.ts +2 -2
- package/AzAd/Group.js +12 -12
- package/AzAd/Identities/AzDevOpsIdentity.d.ts +1 -1
- package/AzAd/Identities/AzDevOpsIdentity.js +9 -6
- package/AzAd/Identities/AzDevOpsManagedIdentity.d.ts +2 -2
- package/AzAd/Identities/AzDevOpsManagedIdentity.js +6 -3
- package/AzAd/RoleAssignment.d.ts +3 -3
- package/AzAd/RoleAssignment.js +3 -3
- package/AzAd/RoleDefinitions/JustInTimeRequestRole.js +10 -10
- package/Builder/AksBuilder.js +15 -1
- package/Builder/PrivateDnsZoneBuilder.d.ts +2 -1
- package/Builder/PrivateDnsZoneBuilder.js +41 -23
- package/Builder/ResourceBuilder.js +12 -6
- package/Builder/SqlBuilder.js +7 -1
- package/Builder/StorageBuilder.js +14 -14
- package/Builder/VaultBuilder.d.ts +2 -1
- package/Builder/VaultBuilder.js +8 -1
- package/Builder/types/resourceBuilder.d.ts +2 -0
- package/Builder/types/sqlBuilder.d.ts +2 -1
- package/Builder/types/storageBuilder.d.ts +10 -8
- package/Builder/types/vaultBuilder.d.ts +6 -1
- package/Cdn/CdnEndpoint.d.ts +2 -3
- package/Cdn/CdnEndpoint.js +15 -17
- package/Cdn/CdnRules.d.ts +6 -2
- package/Cdn/CdnRules.js +51 -56
- package/Certificate/index.d.ts +2 -2
- package/Certificate/index.js +29 -29
- package/Common/AzureEnv.d.ts +2 -3
- package/Common/AzureEnv.js +21 -8
- package/Common/Naming/index.d.ts +1 -1
- package/Common/Naming/index.js +65 -61
- package/Common/index.d.ts +11 -6
- package/Common/index.js +6 -1
- package/ContainerRegistry/index.d.ts +5 -5
- package/ContainerRegistry/index.js +75 -50
- package/Core/KeyGenerators.d.ts +5 -5
- package/Core/KeyGenerators.js +5 -5
- package/CustomRoles/index.js +3 -3
- package/KeyVault/CustomHelper.d.ts +4 -4
- package/KeyVault/CustomHelper.js +7 -7
- package/KeyVault/Helper.js +12 -9
- package/Logs/Helpers.d.ts +1 -1
- package/RedisCache/index.d.ts +2 -2
- package/RedisCache/index.js +10 -5
- package/SignalR/index.d.ts +4 -4
- package/SignalR/index.js +26 -21
- package/Sql/SqlDb.js +2 -3
- package/Sql/index.d.ts +3 -4
- package/Sql/index.js +11 -11
- package/Storage/Helper.d.ts +1 -1
- package/Storage/index.d.ts +2 -3
- package/Storage/index.js +2 -2
- package/VNet/FirewallPolicies/AksFirewallPolicy.d.ts +2 -2
- package/VNet/FirewallPolicies/AksFirewallPolicy.js +107 -117
- package/VNet/FirewallPolicies/CloudPCFirewallPolicy.d.ts +4 -3
- package/VNet/FirewallPolicies/CloudPCFirewallPolicy.js +150 -132
- package/VNet/Helper.d.ts +1 -0
- package/VNet/Helper.js +25 -19
- package/VNet/index.d.ts +9 -9
- package/VNet/index.js +58 -49
- package/VNet/types.d.ts +9 -6
- package/package.json +6 -6
|
@@ -9,191 +9,181 @@ exports.default = ({ priority, allowAccessPublicRegistries, subnetSpaces, dNATs,
|
|
|
9
9
|
if (dNATs) {
|
|
10
10
|
dNATs.forEach((nat) => {
|
|
11
11
|
dnatRules.push({
|
|
12
|
-
ruleType:
|
|
12
|
+
ruleType: 'NatRule',
|
|
13
13
|
name: `${nat.name}-inbound-443`,
|
|
14
14
|
description: `Forward port 443 external IpAddress of ${nat.name} to internal IpAddress`,
|
|
15
|
-
sourceAddresses: [nat.sourceIpAddress ??
|
|
15
|
+
sourceAddresses: [nat.sourceIpAddress ?? '*'],
|
|
16
16
|
destinationAddresses: nat.publicIpAddresses,
|
|
17
|
-
destinationPorts: [
|
|
18
|
-
ipProtocols: [
|
|
17
|
+
destinationPorts: ['443'],
|
|
18
|
+
ipProtocols: ['TCP'],
|
|
19
19
|
translatedAddress: nat.internalIpAddress,
|
|
20
|
-
translatedPort:
|
|
20
|
+
translatedPort: '443',
|
|
21
21
|
});
|
|
22
22
|
if (nat.allowHttp)
|
|
23
23
|
dnatRules.push({
|
|
24
|
-
ruleType:
|
|
24
|
+
ruleType: 'NatRule',
|
|
25
25
|
name: `${nat.name}-inbound-80`,
|
|
26
26
|
description: `Forward port 80 external IpAddress of ${nat.name} to internal IpAddress`,
|
|
27
|
-
sourceAddresses: [nat.sourceIpAddress ??
|
|
27
|
+
sourceAddresses: [nat.sourceIpAddress ?? '*'],
|
|
28
28
|
destinationAddresses: nat.publicIpAddresses,
|
|
29
|
-
destinationPorts: [
|
|
30
|
-
ipProtocols: [
|
|
29
|
+
destinationPorts: ['80'],
|
|
30
|
+
ipProtocols: ['TCP'],
|
|
31
31
|
translatedAddress: nat.internalIpAddress,
|
|
32
|
-
translatedPort:
|
|
32
|
+
translatedPort: '80',
|
|
33
33
|
});
|
|
34
34
|
});
|
|
35
35
|
}
|
|
36
36
|
//AKS Network Rules
|
|
37
37
|
netRules.push({
|
|
38
|
-
ruleType:
|
|
39
|
-
name:
|
|
40
|
-
description:
|
|
41
|
-
ipProtocols: [
|
|
38
|
+
ruleType: 'NetworkRule',
|
|
39
|
+
name: 'aks-vpn',
|
|
40
|
+
description: 'For OPEN VPN tunneled secure communication between the nodes and the control plane for AzureCloud',
|
|
41
|
+
ipProtocols: ['UDP'],
|
|
42
42
|
sourceAddresses: subnetSpaces,
|
|
43
43
|
destinationAddresses: [`AzureCloud.${AzureEnv_1.currentRegionCode}`],
|
|
44
|
-
destinationPorts: [
|
|
44
|
+
destinationPorts: ['1194'],
|
|
45
45
|
}, {
|
|
46
|
-
ruleType:
|
|
47
|
-
name:
|
|
48
|
-
description:
|
|
49
|
-
ipProtocols: [
|
|
46
|
+
ruleType: 'NetworkRule',
|
|
47
|
+
name: 'aks-tcp',
|
|
48
|
+
description: 'For tunneled secure communication between the nodes and the control plane for AzureCloud',
|
|
49
|
+
ipProtocols: ['TCP'],
|
|
50
50
|
sourceAddresses: subnetSpaces,
|
|
51
51
|
destinationAddresses: [`AzureCloud.${AzureEnv_1.currentRegionCode}`],
|
|
52
|
-
destinationPorts:
|
|
52
|
+
destinationPorts: AzureEnv_1.allAzurePorts,
|
|
53
53
|
}, {
|
|
54
|
-
ruleType:
|
|
55
|
-
name:
|
|
56
|
-
description:
|
|
57
|
-
ipProtocols: [
|
|
54
|
+
ruleType: 'NetworkRule',
|
|
55
|
+
name: 'aks-time',
|
|
56
|
+
description: 'Required for Network Time Protocol (NTP) time synchronization on Linux nodes.',
|
|
57
|
+
ipProtocols: ['UDP'],
|
|
58
58
|
sourceAddresses: subnetSpaces,
|
|
59
|
-
destinationAddresses: [
|
|
60
|
-
destinationPorts: [
|
|
59
|
+
destinationAddresses: ['ntp.ubuntu.com'],
|
|
60
|
+
destinationPorts: ['123'],
|
|
61
61
|
},
|
|
62
62
|
//TODO: Remove this
|
|
63
63
|
{
|
|
64
|
-
ruleType:
|
|
65
|
-
name:
|
|
66
|
-
description:
|
|
67
|
-
ipProtocols: [
|
|
64
|
+
ruleType: 'NetworkRule',
|
|
65
|
+
name: 'aks-time-others',
|
|
66
|
+
description: 'Required for Network Time Protocol (NTP) time synchronization on Linux nodes.',
|
|
67
|
+
ipProtocols: ['UDP'],
|
|
68
68
|
sourceAddresses: subnetSpaces,
|
|
69
|
-
destinationAddresses: [
|
|
70
|
-
destinationPorts: [
|
|
69
|
+
destinationAddresses: ['*'],
|
|
70
|
+
destinationPorts: ['123'],
|
|
71
71
|
}, {
|
|
72
|
-
ruleType:
|
|
73
|
-
name:
|
|
74
|
-
description:
|
|
75
|
-
ipProtocols: [
|
|
72
|
+
ruleType: 'NetworkRule',
|
|
73
|
+
name: 'azure-services-tags',
|
|
74
|
+
description: 'Allows internal services to connect to Azure Resources.',
|
|
75
|
+
ipProtocols: ['TCP'],
|
|
76
76
|
sourceAddresses: subnetSpaces,
|
|
77
77
|
destinationAddresses: [
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
//'AzureConnectors.SoutheastAsia',
|
|
85
|
-
//'AzureSignalR', This already using private endpoint
|
|
86
|
-
//'DataFactory.SoutheastAsia',
|
|
87
|
-
//'EventHub.SoutheastAsia',
|
|
88
|
-
"ServiceBus.SoutheastAsia",
|
|
89
|
-
//'Sql.SoutheastAsia', This already using private endpoint
|
|
90
|
-
"Storage.SoutheastAsia",
|
|
78
|
+
'AzureContainerRegistry',
|
|
79
|
+
'MicrosoftContainerRegistry',
|
|
80
|
+
'AzureActiveDirectory',
|
|
81
|
+
'AzureMonitor',
|
|
82
|
+
'AppConfiguration',
|
|
83
|
+
'AzureKeyVault',
|
|
91
84
|
],
|
|
92
|
-
destinationPorts: [
|
|
85
|
+
destinationPorts: ['443'],
|
|
93
86
|
}, {
|
|
94
|
-
ruleType:
|
|
95
|
-
name:
|
|
96
|
-
description:
|
|
97
|
-
ipProtocols: [
|
|
87
|
+
ruleType: 'NetworkRule',
|
|
88
|
+
name: 'others-dns',
|
|
89
|
+
description: 'Others DNS.',
|
|
90
|
+
ipProtocols: ['TCP', 'UDP'],
|
|
98
91
|
sourceAddresses: subnetSpaces,
|
|
99
|
-
destinationAddresses: [
|
|
100
|
-
destinationPorts: [
|
|
92
|
+
destinationAddresses: ['*'],
|
|
93
|
+
destinationPorts: ['53'],
|
|
101
94
|
});
|
|
102
95
|
//AKS Apps Rules
|
|
103
96
|
appRules.push({
|
|
104
|
-
ruleType:
|
|
105
|
-
name:
|
|
106
|
-
description:
|
|
97
|
+
ruleType: 'ApplicationRule',
|
|
98
|
+
name: 'aks-services-fqdnTags',
|
|
99
|
+
description: 'Allows pods to access AzureKubernetesService',
|
|
107
100
|
sourceAddresses: subnetSpaces,
|
|
108
|
-
fqdnTags: [
|
|
109
|
-
protocols: [{ protocolType:
|
|
101
|
+
fqdnTags: ['AzureKubernetesService'],
|
|
102
|
+
protocols: [{ protocolType: 'Https', port: 443 }],
|
|
110
103
|
}, {
|
|
111
|
-
ruleType:
|
|
112
|
-
name:
|
|
113
|
-
description:
|
|
104
|
+
ruleType: 'ApplicationRule',
|
|
105
|
+
name: 'aks-fqdn',
|
|
106
|
+
description: 'Azure Global required FQDN',
|
|
114
107
|
sourceAddresses: subnetSpaces,
|
|
115
108
|
targetFqdns: [
|
|
116
109
|
//AKS mater
|
|
117
|
-
|
|
110
|
+
'*.hcp.southeastasia.azmk8s.io',
|
|
118
111
|
//Microsoft Container Registry
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
112
|
+
'*.azurecr.io',
|
|
113
|
+
'mcr.microsoft.com',
|
|
114
|
+
'data.mcr.microsoft.com',
|
|
115
|
+
'*.data.mcr.microsoft.com',
|
|
122
116
|
//Azure management
|
|
123
|
-
|
|
124
|
-
|
|
117
|
+
'management.azure.com',
|
|
118
|
+
'login.microsoftonline.com',
|
|
125
119
|
//Microsoft trusted package repository
|
|
126
|
-
|
|
127
|
-
//Azure CDN
|
|
128
|
-
//"acs-mirror.azureedge.net",
|
|
129
|
-
//CosmosDb
|
|
130
|
-
//"*.documents.azure.com",
|
|
120
|
+
'packages.microsoft.com',
|
|
131
121
|
],
|
|
132
|
-
protocols: [{ protocolType:
|
|
122
|
+
protocols: [{ protocolType: 'Https', port: 443 }],
|
|
133
123
|
}, {
|
|
134
|
-
ruleType:
|
|
135
|
-
name:
|
|
136
|
-
description:
|
|
124
|
+
ruleType: 'ApplicationRule',
|
|
125
|
+
name: 'azure-monitors',
|
|
126
|
+
description: 'Azure AKS Monitoring',
|
|
137
127
|
sourceAddresses: subnetSpaces,
|
|
138
128
|
targetFqdns: [
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
129
|
+
'dc.services.visualstudio.com',
|
|
130
|
+
'*.ods.opinsights.azure.com',
|
|
131
|
+
'*.oms.opinsights.azure.com',
|
|
132
|
+
'*.monitoring.azure.com',
|
|
133
|
+
'*.services.visualstudio.com',
|
|
144
134
|
],
|
|
145
|
-
protocols: [{ protocolType:
|
|
135
|
+
protocols: [{ protocolType: 'Https', port: 443 }],
|
|
146
136
|
}, {
|
|
147
|
-
ruleType:
|
|
148
|
-
name:
|
|
149
|
-
description:
|
|
137
|
+
ruleType: 'ApplicationRule',
|
|
138
|
+
name: 'azure-policy',
|
|
139
|
+
description: 'Azure AKS Policy Management',
|
|
150
140
|
sourceAddresses: subnetSpaces,
|
|
151
141
|
targetFqdns: [
|
|
152
|
-
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
|
|
142
|
+
'*.policy.core.windows.net',
|
|
143
|
+
'gov-prod-policy-data.trafficmanager.net',
|
|
144
|
+
'raw.githubusercontent.com',
|
|
145
|
+
'dc.services.visualstudio.com',
|
|
156
146
|
],
|
|
157
|
-
protocols: [{ protocolType:
|
|
147
|
+
protocols: [{ protocolType: 'Https', port: 443 }],
|
|
158
148
|
});
|
|
159
149
|
if (allowAccessPublicRegistries) {
|
|
160
150
|
appRules.push({
|
|
161
|
-
ruleType:
|
|
162
|
-
name:
|
|
151
|
+
ruleType: 'ApplicationRule',
|
|
152
|
+
name: 'docker-services',
|
|
163
153
|
sourceAddresses: subnetSpaces,
|
|
164
|
-
targetFqdns: [
|
|
165
|
-
protocols: [{ protocolType:
|
|
154
|
+
targetFqdns: ['*.docker.io', 'docker.io', '*.docker.com', '*.pkg.dev'],
|
|
155
|
+
protocols: [{ protocolType: 'Https', port: 443 }],
|
|
166
156
|
}, {
|
|
167
|
-
ruleType:
|
|
168
|
-
name:
|
|
157
|
+
ruleType: 'ApplicationRule',
|
|
158
|
+
name: 'k8s-services',
|
|
169
159
|
sourceAddresses: subnetSpaces,
|
|
170
160
|
targetFqdns: [
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
161
|
+
'quay.io', //For Cert Manager
|
|
162
|
+
'*.quay.io',
|
|
163
|
+
'k8s.gcr.io', //nginx images
|
|
164
|
+
'*.k8s.io',
|
|
165
|
+
'*.cloudfront.net',
|
|
166
|
+
'*.amazonaws.com',
|
|
167
|
+
'*.gcr.io',
|
|
168
|
+
'*.googleapis.com',
|
|
179
169
|
],
|
|
180
|
-
protocols: [{ protocolType:
|
|
170
|
+
protocols: [{ protocolType: 'Https', port: 443 }],
|
|
181
171
|
}, {
|
|
182
|
-
ruleType:
|
|
183
|
-
name:
|
|
172
|
+
ruleType: 'ApplicationRule',
|
|
173
|
+
name: 'ubuntu-services',
|
|
184
174
|
sourceAddresses: subnetSpaces,
|
|
185
175
|
targetFqdns: [
|
|
186
|
-
|
|
187
|
-
|
|
188
|
-
|
|
176
|
+
'security.ubuntu.com',
|
|
177
|
+
'azure.archive.ubuntu.com',
|
|
178
|
+
'changelogs.ubuntu.com',
|
|
189
179
|
],
|
|
190
|
-
protocols: [{ protocolType:
|
|
180
|
+
protocols: [{ protocolType: 'Https', port: 443 }],
|
|
191
181
|
});
|
|
192
182
|
}
|
|
193
183
|
return (0, FirewallPolicy_1.FirewallPolicyGroup)({
|
|
194
|
-
policy: { name:
|
|
184
|
+
policy: { name: 'aks-firewall-policy', dnatRules, netRules, appRules },
|
|
195
185
|
priority,
|
|
196
|
-
action:
|
|
186
|
+
action: 'Allow',
|
|
197
187
|
});
|
|
198
188
|
};
|
|
199
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
189
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
import { Input } from
|
|
2
|
-
import { FirewallPolicyRuleCollectionResults } from
|
|
1
|
+
import { Input } from '@pulumi/pulumi';
|
|
2
|
+
import { FirewallPolicyRuleCollectionResults } from '../types';
|
|
3
3
|
interface Props {
|
|
4
4
|
name?: string;
|
|
5
5
|
priority: number;
|
|
@@ -9,9 +9,10 @@ interface Props {
|
|
|
9
9
|
allowsAzure?: boolean;
|
|
10
10
|
allowsAzDevOps?: boolean;
|
|
11
11
|
allowsK8sTools?: boolean;
|
|
12
|
+
allowsDevTools?: boolean;
|
|
12
13
|
allowsSearch?: boolean;
|
|
13
14
|
allowsOffice365?: boolean;
|
|
14
15
|
allowsWindows365?: boolean;
|
|
15
16
|
}
|
|
16
|
-
declare const _default: ({ name, priority, subnetSpaces, allowsOffice365, allowsWindows365, allowsAzure, allowsAzDevOps, allowsK8sTools, allowIpCheckApi, allowsSearch, allowAllOutbound, }: Props) => FirewallPolicyRuleCollectionResults;
|
|
17
|
+
declare const _default: ({ name, priority, subnetSpaces, allowsOffice365, allowsWindows365, allowsAzure, allowsAzDevOps, allowsK8sTools, allowsDevTools, allowIpCheckApi, allowsSearch, allowAllOutbound, }: Props) => FirewallPolicyRuleCollectionResults;
|
|
17
18
|
export default _default;
|