@drunk-pulumi/azure 1.0.3 → 1.0.5

package/VNet/FirewallPolicies/AksFirewallPolicy.js

@@ -1,199 +1,192 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const AzureEnv_1 = require("../../Common/AzureEnv");
+const Common_1 = require("../../Common");
 const FirewallPolicy_1 = require("../FirewallPolicy");
-exports.default = ({ priority, allowAccessPublicRegistries, subnetSpaces, dNATs, }) => {
+exports.default = ({ priority, allowAccessPublicRegistries, subnetSpaces, trustedAcrs = [], dNATs, }) => {
     const dnatRules = new Array();
     const netRules = new Array();
     const appRules = new Array();
     if (dNATs) {
         dNATs.forEach((nat) => {
             dnatRules.push({
-                ruleType: "NatRule",
+                ruleType: 'NatRule',
                 name: `${nat.name}-inbound-443`,
                 description: `Forward port 443 external IpAddress of ${nat.name} to internal IpAddress`,
-                sourceAddresses: [nat.sourceIpAddress ?? "*"],
+                sourceAddresses: [nat.sourceIpAddress ?? '*'],
                 destinationAddresses: nat.publicIpAddresses,
-                destinationPorts: ["443"],
-                ipProtocols: ["TCP"],
+                destinationPorts: ['443'],
+                ipProtocols: ['TCP'],
                 translatedAddress: nat.internalIpAddress,
-                translatedPort: "443",
+                translatedPort: '443',
             });
             if (nat.allowHttp)
                 dnatRules.push({
-                    ruleType: "NatRule",
+                    ruleType: 'NatRule',
                     name: `${nat.name}-inbound-80`,
                     description: `Forward port 80 external IpAddress of ${nat.name} to internal IpAddress`,
-                    sourceAddresses: [nat.sourceIpAddress ?? "*"],
+                    sourceAddresses: [nat.sourceIpAddress ?? '*'],
                     destinationAddresses: nat.publicIpAddresses,
-                    destinationPorts: ["80"],
-                    ipProtocols: ["TCP"],
+                    destinationPorts: ['80'],
+                    ipProtocols: ['TCP'],
                     translatedAddress: nat.internalIpAddress,
-                    translatedPort: "80",
+                    translatedPort: '80',
                 });
         });
     }
     //AKS Network Rules
     netRules.push({
-        ruleType: "NetworkRule",
-        name: "aks-vpn",
-        description: "For OPEN VPN tunneled secure communication between the nodes and the control plane for AzureCloud.SoutheastAsia",
-        ipProtocols: ["UDP"],
+        ruleType: 'NetworkRule',
+        name: 'aks-vpn',
+        description: 'For OPEN VPN tunneled secure communication between the nodes and the control plane for AzureCloud',
+        ipProtocols: ['UDP'],
         sourceAddresses: subnetSpaces,
-        destinationAddresses: [`AzureCloud.${AzureEnv_1.currentRegionCode}`],
-        destinationPorts: ["1194"],
+        destinationAddresses: [`AzureCloud.${Common_1.currentRegionCode}`],
+        destinationPorts: ['1194'],
     }, {
-        ruleType: "NetworkRule",
-        name: "aks-tcp",
-        description: "For tunneled secure communication between the nodes and the control plane for AzureCloud.SoutheastAsia",
-        ipProtocols: ["TCP"],
+        ruleType: 'NetworkRule',
+        name: 'aks-tcp',
+        description: 'For tunneled secure communication between the nodes and the control plane for AzureCloud',
+        ipProtocols: ['TCP'],
         sourceAddresses: subnetSpaces,
-        destinationAddresses: [`AzureCloud.${AzureEnv_1.currentRegionCode}`],
-        destinationPorts: ["443", "9000"],
+        destinationAddresses: [`AzureCloud.${Common_1.currentRegionCode}`],
+        destinationPorts: Common_1.allAzurePorts,
     }, {
-        ruleType: "NetworkRule",
-        name: "aks-time",
-        description: "Required for Network Time Protocol (NTP) time synchronization on Linux nodes.",
-        ipProtocols: ["UDP"],
+        ruleType: 'NetworkRule',
+        name: 'aks-time',
+        description: 'Required for Network Time Protocol (NTP) time synchronization on Linux nodes.',
+        ipProtocols: ['UDP'],
         sourceAddresses: subnetSpaces,
-        destinationAddresses: ["ntp.ubuntu.com"],
-        destinationPorts: ["123"],
+        destinationAddresses: ['ntp.ubuntu.com'],
+        destinationPorts: ['123'],
     }, 
     //TODO: Remove this
+    // {
+    //   ruleType: 'NetworkRule',
+    //   name: 'aks-time-others',
+    //   description:
+    //     'Required for Network Time Protocol (NTP) time synchronization on Linux nodes.',
+    //   ipProtocols: ['UDP'],
+    //   sourceAddresses: subnetSpaces,
+    //   destinationAddresses: ['*'],
+    //   destinationPorts: ['123'],
+    // },
     {
-        ruleType: "NetworkRule",
-        name: "aks-time-others",
-        description: "Required for Network Time Protocol (NTP) time synchronization on Linux nodes.",
-        ipProtocols: ["UDP"],
-        sourceAddresses: subnetSpaces,
-        destinationAddresses: ["*"],
-        destinationPorts: ["123"],
-    }, {
-        ruleType: "NetworkRule",
-        name: "azure-services-tags",
-        description: "Allows internal services to connect to Azure Resources.",
-        ipProtocols: ["TCP"],
+        ruleType: 'NetworkRule',
+        name: 'azure-services-tags',
+        description: 'Allows internal services to connect to Azure Resources.',
+        ipProtocols: ['TCP'],
         sourceAddresses: subnetSpaces,
         destinationAddresses: [
-            "AzureContainerRegistry.SoutheastAsia",
-            "MicrosoftContainerRegistry.SoutheastAsia",
-            "AzureActiveDirectory",
-            "AzureMonitor.SoutheastAsia",
-            "AppConfiguration",
-            "AzureKeyVault.SoutheastAsia",
-            //'AzureConnectors.SoutheastAsia',
-            //'AzureSignalR', This already using private endpoint
-            //'DataFactory.SoutheastAsia',
-            //'EventHub.SoutheastAsia',
-            "ServiceBus.SoutheastAsia",
-            //'Sql.SoutheastAsia', This already using private endpoint
-            "Storage.SoutheastAsia",
+            'AzureContainerRegistry',
+            'MicrosoftContainerRegistry',
+            'AzureActiveDirectory',
+            'AzureMonitor',
+            'AppConfiguration',
+            'AzureKeyVault',
         ],
-        destinationPorts: ["443"],
+        destinationPorts: ['443'],
     }, {
-        ruleType: "NetworkRule",
-        name: "others-dns",
-        description: "Others DNS.",
-        ipProtocols: ["TCP", "UDP"],
+        ruleType: 'NetworkRule',
+        name: 'others-dns',
+        description: 'Others DNS.',
+        ipProtocols: ['TCP', 'UDP'],
         sourceAddresses: subnetSpaces,
-        destinationAddresses: ["*"],
-        destinationPorts: ["53"],
+        destinationAddresses: ['*'],
+        destinationPorts: ['53'],
     });
     //AKS Apps Rules
     appRules.push({
-        ruleType: "ApplicationRule",
-        name: "aks-services-fqdnTags",
-        description: "Allows pods to access AzureKubernetesService",
+        ruleType: 'ApplicationRule',
+        name: 'aks-services-fqdnTags',
+        description: 'Allows pods to access AzureKubernetesService',
         sourceAddresses: subnetSpaces,
-        fqdnTags: ["AzureKubernetesService"],
-        protocols: [{ protocolType: "Https", port: 443 }],
+        fqdnTags: ['AzureKubernetesService'],
+        protocols: [{ protocolType: 'Https', port: 443 }],
     }, {
-        ruleType: "ApplicationRule",
-        name: "aks-fqdn",
-        description: "Azure Global required FQDN",
+        ruleType: 'ApplicationRule',
+        name: 'aks-fqdn',
+        description: 'Azure Global required FQDN',
         sourceAddresses: subnetSpaces,
         targetFqdns: [
             //AKS mater
-            "*.hcp.southeastasia.azmk8s.io",
+            `*.hcp.${Common_1.currentRegionCode}.azmk8s.io`,
             //Microsoft Container Registry
-            "mcr.microsoft.com",
-            "data.mcr.microsoft.com",
-            "*.data.mcr.microsoft.com",
+            ...trustedAcrs?.map((s) => `${s}.azurecr.io`),
+            'mcr.microsoft.com',
+            '*.mcr.microsoft.com',
+            //'data.mcr.microsoft.com',
+            //'*.data.mcr.microsoft.com',
             //Azure management
-            "management.azure.com",
-            "login.microsoftonline.com",
+            'management.azure.com',
+            'login.microsoftonline.com',
             //Microsoft trusted package repository
-            "packages.microsoft.com",
-            //Azure CDN
-            //"acs-mirror.azureedge.net",
-            //CosmosDb
-            //"*.documents.azure.com",
+            'packages.microsoft.com',
         ],
-        protocols: [{ protocolType: "Https", port: 443 }],
+        protocols: [{ protocolType: 'Https', port: 443 }],
     }, {
-        ruleType: "ApplicationRule",
-        name: "azure-monitors",
-        description: "Azure AKS Monitoring",
+        ruleType: 'ApplicationRule',
+        name: 'azure-monitors',
+        description: 'Azure AKS Monitoring',
         sourceAddresses: subnetSpaces,
         targetFqdns: [
-            "dc.services.visualstudio.com",
-            "*.ods.opinsights.azure.com",
-            "*.oms.opinsights.azure.com",
-            "*.monitoring.azure.com",
-            "*.services.visualstudio.com",
+            'dc.services.visualstudio.com',
+            '*.ods.opinsights.azure.com',
+            '*.oms.opinsights.azure.com',
+            '*.monitoring.azure.com',
+            '*.services.visualstudio.com',
         ],
-        protocols: [{ protocolType: "Https", port: 443 }],
+        protocols: [{ protocolType: 'Https', port: 443 }],
     }, {
-        ruleType: "ApplicationRule",
-        name: "azure-policy",
-        description: "Azure AKS Policy Management",
+        ruleType: 'ApplicationRule',
+        name: 'azure-policy',
+        description: 'Azure AKS Policy Management',
         sourceAddresses: subnetSpaces,
         targetFqdns: [
-            "*.policy.core.windows.net",
-            "gov-prod-policy-data.trafficmanager.net",
-            "raw.githubusercontent.com",
-            "dc.services.visualstudio.com",
+            '*.policy.core.windows.net',
+            'gov-prod-policy-data.trafficmanager.net',
+            'raw.githubusercontent.com',
+            'dc.services.visualstudio.com',
         ],
-        protocols: [{ protocolType: "Https", port: 443 }],
+        protocols: [{ protocolType: 'Https', port: 443 }],
     });
     if (allowAccessPublicRegistries) {
         appRules.push({
-            ruleType: "ApplicationRule",
-            name: "docker-services",
+            ruleType: 'ApplicationRule',
+            name: 'docker-services',
             sourceAddresses: subnetSpaces,
-            targetFqdns: ["*.docker.io", "docker.io", "*.docker.com", "*.pkg.dev"],
-            protocols: [{ protocolType: "Https", port: 443 }],
+            targetFqdns: ['*.docker.io', 'docker.io', '*.docker.com', '*.pkg.dev'],
+            protocols: [{ protocolType: 'Https', port: 443 }],
         }, {
-            ruleType: "ApplicationRule",
-            name: "k8s-services",
+            ruleType: 'ApplicationRule',
+            name: 'k8s-services',
             sourceAddresses: subnetSpaces,
             targetFqdns: [
-                "quay.io", //For Cert Manager
-                "*.quay.io",
-                "k8s.gcr.io", //nginx images
-                "*.k8s.io",
-                "*.cloudfront.net",
-                "*.amazonaws.com",
-                "*.gcr.io",
-                "*.googleapis.com",
+                'quay.io', //For Cert Manager
+                '*.quay.io',
+                'k8s.gcr.io', //nginx images
+                '*.k8s.io',
+                '*.cloudfront.net',
+                '*.amazonaws.com',
+                '*.gcr.io',
+                '*.googleapis.com',
             ],
-            protocols: [{ protocolType: "Https", port: 443 }],
+            protocols: [{ protocolType: 'Https', port: 443 }],
         }, {
-            ruleType: "ApplicationRule",
-            name: "ubuntu-services",
+            ruleType: 'ApplicationRule',
+            name: 'ubuntu-services',
             sourceAddresses: subnetSpaces,
             targetFqdns: [
-                "security.ubuntu.com",
-                "azure.archive.ubuntu.com",
-                "changelogs.ubuntu.com",
+                'security.ubuntu.com',
+                'azure.archive.ubuntu.com',
+                'changelogs.ubuntu.com',
             ],
-            protocols: [{ protocolType: "Https", port: 443 }],
+            protocols: [{ protocolType: 'Https', port: 443 }],
         });
     }
     return (0, FirewallPolicy_1.FirewallPolicyGroup)({
-        policy: { name: "aks-firewall-policy", dnatRules, netRules, appRules },
+        policy: { name: 'aks-firewall-policy', dnatRules, netRules, appRules },
         priority,
-        action: "Allow",
+        action: 'Allow',
     });
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/VNet/FirewallPolicies/CloudPCFirewallPolicy.d.ts

@@ -1,5 +1,5 @@
-import { Input } from "@pulumi/pulumi";
-import { FirewallPolicyRuleCollectionResults } from "../types";
+import { Input } from '@pulumi/pulumi';
+import { FirewallPolicyRuleCollectionResults } from '../types';
 interface Props {
     name?: string;
     priority: number;
@@ -9,9 +9,10 @@ interface Props {
     allowsAzure?: boolean;
     allowsAzDevOps?: boolean;
     allowsK8sTools?: boolean;
+    allowsDevTools?: boolean;
     allowsSearch?: boolean;
     allowsOffice365?: boolean;
     allowsWindows365?: boolean;
 }
-declare const _default: ({ name, priority, subnetSpaces, allowsOffice365, allowsWindows365, allowsAzure, allowsAzDevOps, allowsK8sTools, allowIpCheckApi, allowsSearch, allowAllOutbound, }: Props) => FirewallPolicyRuleCollectionResults;
+declare const _default: ({ name, priority, subnetSpaces, allowsOffice365, allowsWindows365, allowsAzure, allowsAzDevOps, allowsK8sTools, allowsDevTools, allowIpCheckApi, allowsSearch, allowAllOutbound, }: Props) => FirewallPolicyRuleCollectionResults;
 export default _default;