@drunk-pulumi/azure 1.0.45 → 1.0.46
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AzAd/Identity.js +2 -2
- package/Builder/VnetBuilder.js +2 -2
- package/VNet/FirewallPolicies/CFTunnelFirewallPolicy.d.ts +6 -4
- package/VNet/FirewallPolicies/CFTunnelFirewallPolicy.js +48 -37
- package/VNet/FirewallPolicies/CloudPCFirewallPolicy.js +14 -11
- package/package.json +1 -1
- package/VNet/FirewallRules/AksFirewallRules.d.ts +0 -25
- package/VNet/FirewallRules/AksFirewallRules.js +0 -251
- package/VNet/FirewallRules/DefaultRules.d.ts +0 -2
- package/VNet/FirewallRules/DefaultRules.js +0 -23
package/AzAd/Identity.js
CHANGED
|
@@ -109,7 +109,7 @@ exports.default = ({ name, owners, createClientSecret = false, createPrincipal =
|
|
|
109
109
|
}, { ignoreChanges: ['clientId', 'applicationId'] });
|
|
110
110
|
principalSecret = new azureAD.ServicePrincipalPassword(name, {
|
|
111
111
|
displayName: name,
|
|
112
|
-
servicePrincipalId: principal.objectId
|
|
112
|
+
servicePrincipalId: pulumi.interpolate `/servicePrincipals/${principal.objectId}`,
|
|
113
113
|
}).value;
|
|
114
114
|
if (vaultInfo) {
|
|
115
115
|
(0, KeyVault_1.addCustomSecrets)({
|
|
@@ -133,4 +133,4 @@ exports.default = ({ name, owners, createClientSecret = false, createPrincipal =
|
|
|
133
133
|
instance: app,
|
|
134
134
|
};
|
|
135
135
|
};
|
|
136
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
136
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiSWRlbnRpdHkuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvQXpBZC9JZGVudGl0eS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0FBQUEseURBQTJDO0FBRTNDLHVEQUF5QztBQUV6QyxzQ0FBbUM7QUFRbkMsMENBQWdFO0FBQ2hFLHFDQUFrRDtBQTZCbEQsa0JBQWUsQ0FBQyxFQUNkLElBQUksRUFDSixNQUFNLEVBQ04sa0JBQWtCLEdBQUcsS0FBSyxFQUMxQixlQUFlLEdBQUcsS0FBSyxFQUN2QixTQUFTLEVBQ1QsT0FBTyxHQUFHLEtBQUssRUFDZixhQUFhLEdBQUcsS0FBSyxFQUNyQixRQUFRLEVBQ1IseUJBQXlCLEVBQ3pCLHdCQUF3QixHQUFHLEVBQUUsRUFDN0IsaUJBQWlCLEVBQ2pCLFlBQVksR0FBRyxLQUFLLEVBQ3BCLGNBQWMsRUFDZCxTQUFTLEVBQ1QsU0FBUyxHQUNLLEVBQW1ELEVBQUU7SUFDbkUsc0NBQXNDO0lBQ3RDLElBQUksR0FBRyxlQUFNLENBQUMsZUFBZSxDQUFDLElBQUksQ0FBQyxDQUFDO0lBQ3BDLE1BQU0sV0FBVyxHQUFHLElBQUEsK0JBQXNCLEVBQUMsSUFBSSxDQUFDLENBQUM7SUFFakQsTUFBTSxjQUFjLEdBQUcsWUFBWTtRQUNqQyxDQUFDLENBQUMsU0FBUztRQUNYLENBQUMsQ0FBQyxDQUFDLFNBQVMsSUFBSSxDQUFDLFdBQVcsRUFBRSxFQUFFLENBQUMsQ0FBQztJQUVwQyxNQUFNLEdBQUcsR0FBRyxJQUFJLE9BQU8sQ0FBQyxXQUFXLENBQ2pDLElBQUksRUFDSjtRQUNFLFdBQVcsRUFBRSxJQUFJO1FBQ2pCLFdBQVcsRUFBRSxJQUFJO1FBRWpCLE1BQU07UUFDTixRQUFRO1FBQ1IsY0FBYyxFQUFFLGFBQWEsQ0FBQyxDQUFDLENBQUMscUJBQXFCLENBQUMsQ0FBQyxDQUFDLGNBQWM7UUFDdEUscUJBQXFCLEVBQUUsQ0FBQyxlQUFlLENBQUM7UUFDeEMsY0FBYztRQUVkLFlBQVksRUFBRSxZQUFZLENBQUMsQ0FBQyxDQUFDLEVBQUUsWUFBWSxFQUFFLFNBQVMsRUFBRSxDQUFDLENBQUMsQ0FBQyxTQUFTO1FBRXBFLHFCQUFxQixFQUNuQixPQUFPLEtBQUssS0FBSztZQUNmLENBQUMsQ0FBQztnQkFDRSxZQUFZLEVBQUUsU0FBUzthQUN4QjtZQUNILENBQUMsQ0FBQyxTQUFTO1FBRWYsR0FBRyxFQUNELE9BQU8sS0FBSyxLQUFLO1lBQ2YsQ0FBQyxDQUFDO2dCQUNFLFlBQVksRUFBRSxTQUFTO2dCQUN2QixhQUFhLEVBQUU7b0JBQ2IsMEJBQTBCLEVBQUUsSUFBSTtvQkFDaEMsc0JBQXNCLEVBQUUsSUFBSTtpQkFDN0I7YUFDRjtZQUNILENBQUMsQ0FBQyxTQUFTO1FBRWYsR0FBRyxFQUNELE9BQU8sS0FBSyxLQUFLO1lBQ2YsQ0FBQyxDQUFDO2dCQUNFLHNCQUFzQixFQUFFLGlCQUFpQjtnQkFDekMsbUJBQW1CLEVBQUUsSUFBSTtnQkFDekIsMkJBQTJCLEVBQUUsQ0FBQzthQUMvQjtZQUNILENBQUMsQ0FBQyxTQUFTO1FBRWYsMkJBQTJCLEVBQUUsS0FBSztRQUNsQyxxQkFBcUIsRUFBRSxJQUFJO1FBQzNCLHdCQUF3QixFQUFFLHdCQUF3QjtZQUNoRCxDQUFDLENBQUMsTUFBTSxDQUFDLE1BQU0sQ0FBQyx3QkFBd0IsQ0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDO1lBQzlELENBQUMsQ0FBQyxTQUFTO1FBRWIsY0FBYztLQUNmLEVBQ0QsRUFBRSxTQUFTLEVBQUUsQ0FDZCxDQUFDO0lBRUYsSUFBSSxTQUFTLEVBQUUsQ0FBQztRQUNkLElBQUEsMkJBQWdCLEVBQUM7WUFDZixTQUFTO1lBQ1QsV0FBVyxFQUFFLFVBQVU7WUFDdkIsS0FBSyxFQUFFO2dCQUNMLEVBQUUsSUFBSSxFQUFFLFdBQVcsQ0FBQyxZQUFZLEVBQUUsS0FBSyxFQUFFLEdBQUcsQ0FBQyxRQUFRLEVBQUU7Z0JBQ3ZELEVBQUUsSUFBSSxFQUFFLFdBQVcsQ0FBQyxlQUFlLEVBQUUsS0FBSyxFQUFFLEdBQUcsQ0FBQyxRQUFRLEVBQUU7YUFDM0Q7U0FDRixDQUFDLENBQUM7SUFDTCxDQUFDO0lBRUQsSUFBSSxZQUFZLEdBQStCLFNBQVMsQ0FBQztJQUN6RCxJQUFJLGtCQUFrQixFQUFFLENBQUM7UUFDdkIsWUFBWSxHQUFHLElBQUksT0FBTyxDQUFDLG1CQUFtQixDQUM1QyxJQUFJLEVBQ0o7WUFDRSxXQUFXLEVBQUUsSUFBSTtZQUNqQixhQUFhLEVBQUUsR0FBRyxDQUFDLEVBQUU7WUFDckIsZUFBZSxFQUFFLFFBQVE7U0FDMUIsRUFDRCxFQUFFLGFBQWEsRUFBRSxDQUFDLGVBQWUsRUFBRSxxQkFBcUIsQ0FBQyxFQUFFLENBQzVELENBQUMsS0FBSyxDQUFDO1FBRVIsSUFBSSxTQUFTLEVBQUUsQ0FBQztZQUNkLElBQUEsMEJBQWUsRUFBQztnQkFDZCxJQUFJLEVBQUUsV0FBVyxDQUFDLG1CQUFtQjtnQkFDckMsS0FBSyxFQUFFLFlBQVk7Z0JBQ25CLFNBQVM7Z0JBQ1QsV0FBVyxFQUFFLFVBQVU7Z0JBQ3ZCLFNBQVMsRUFBRSxHQUFHO2FBQ2YsQ0FBQyxDQUFDO1FBQ0wsQ0FBQztJQUNILENBQUM7SUFFRCxJQUFJLFNBQXVDLENBQUM7SUFDNUMsSUFBSSxlQUFlLEdBQStCLFNBQVMsQ0FBQztJQUU1RCxJQUFJLGVBQWUsSUFBSSx5QkFBeUIsRUFBRSxDQUFDO1FBQ2pELFNBQVMsR0FBRyxJQUFJLE9BQU8sQ0FBQyxnQkFBZ0IsQ0FDdEMsSUFBSSxFQUNKO1lBQ0UsaUZBQWlGO1lBQ2pGLHlCQUF5QjtZQUN6QixRQUFRLEVBQUUsR0FBRyxDQUFDLFFBQVE7U0FDdkIsRUFDRCxFQUFFLGFBQWEsRUFBRSxDQUFDLFVBQVUsRUFBRSxlQUFlLENBQUMsRUFBRSxDQUNqRCxDQUFDO1FBRUYsZUFBZSxHQUFHLElBQUksT0FBTyxDQUFDLHdCQUF3QixDQUFDLElBQUksRUFBRTtZQUMzRCxXQUFXLEVBQUUsSUFBSTtZQUNqQixrQkFBa0IsRUFBRSxNQUFNLENBQUMsV0FBVyxDQUFBLHNCQUFzQixTQUFTLENBQUMsUUFBUSxFQUFFO1NBQ2pGLENBQUMsQ0FBQyxLQUFLLENBQUM7UUFFVCxJQUFJLFNBQVMsRUFBRSxDQUFDO1lBQ2QsSUFBQSwyQkFBZ0IsRUFBQztnQkFDZixTQUFTO2dCQUNULFdBQVcsRUFBRSxVQUFVO2dCQUN2QixTQUFTLEVBQUUsU0FBUztnQkFDcEIsS0FBSyxFQUFFO29CQUNMLEVBQUUsSUFBSSxFQUFFLFdBQVcsQ0FBQyxrQkFBa0IsRUFBRSxLQUFLLEVBQUUsU0FBUyxDQUFDLFFBQVEsRUFBRTtvQkFDbkUsRUFBRSxJQUFJLEVBQUUsV0FBVyxDQUFDLHNCQUFzQixFQUFFLEtBQUssRUFBRSxlQUFlLEVBQUU7aUJBQ3JFO2FBQ0YsQ0FBQyxDQUFDO1FBQ0wsQ0FBQztJQUNILENBQUM7SUFFRCxPQUFPO1FBQ0wsSUFBSTtRQUNKLFFBQVEsRUFBRSxHQUFHLENBQUMsUUFBUTtRQUN0QixRQUFRLEVBQUUsR0FBRyxDQUFDLFFBQVE7UUFDdEIsWUFBWTtRQUNaLFdBQVcsRUFBRSxTQUFTLEVBQUUsUUFBUTtRQUNoQyxlQUFlO1FBQ2YsUUFBUSxFQUFFLEdBQUc7S0FDZCxDQUFDO0FBQ0osQ0FBQyxDQUFDIn0=
|
package/Builder/VnetBuilder.js
CHANGED
|
@@ -276,7 +276,7 @@ class VnetBuilder extends types.Builder {
|
|
|
276
276
|
...this.commonProps,
|
|
277
277
|
...this._bastionProps,
|
|
278
278
|
subnetId: this._vnetInstance.bastionSubnet.apply((s) => s.id),
|
|
279
|
-
dependsOn:
|
|
279
|
+
dependsOn: this._vnetInstance.vnet,
|
|
280
280
|
});
|
|
281
281
|
}
|
|
282
282
|
buildPrivateDns() {
|
|
@@ -342,4 +342,4 @@ class VnetBuilder extends types.Builder {
|
|
|
342
342
|
}
|
|
343
343
|
}
|
|
344
344
|
exports.default = (props) => new VnetBuilder(props);
|
|
345
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
345
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,9 +1,11 @@
|
|
|
1
|
-
import { Input } from
|
|
2
|
-
import { FirewallPolicyRuleCollectionResults } from
|
|
1
|
+
import { Input } from '@pulumi/pulumi';
|
|
2
|
+
import { FirewallPolicyRuleCollectionResults } from '../types';
|
|
3
3
|
interface Props {
|
|
4
4
|
name?: string;
|
|
5
5
|
priority: number;
|
|
6
|
-
|
|
6
|
+
cloudflareSubnetSpaces: Array<Input<string>>;
|
|
7
|
+
internalSubnetSpaces?: Array<Input<string>>;
|
|
8
|
+
internalPorts?: Array<Input<string>>;
|
|
7
9
|
}
|
|
8
|
-
declare const _default: ({ name, priority,
|
|
10
|
+
declare const _default: ({ name, priority, cloudflareSubnetSpaces, internalSubnetSpaces, internalPorts, }: Props) => FirewallPolicyRuleCollectionResults;
|
|
9
11
|
export default _default;
|
|
@@ -1,59 +1,70 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
const FirewallPolicy_1 = require("../FirewallPolicy");
|
|
4
|
-
exports.default = ({ name =
|
|
4
|
+
exports.default = ({ name = 'cf-tunnel', priority, cloudflareSubnetSpaces, internalSubnetSpaces, internalPorts = ['443', '80', '22', '3389'], }) => {
|
|
5
5
|
const netRules = new Array();
|
|
6
6
|
const appRules = new Array();
|
|
7
7
|
netRules.push({
|
|
8
|
-
ruleType:
|
|
8
|
+
ruleType: 'NetworkRule',
|
|
9
9
|
name: `${name}-net-allows-cloudflare`,
|
|
10
|
-
description:
|
|
11
|
-
ipProtocols: [
|
|
12
|
-
sourceAddresses:
|
|
10
|
+
description: 'Allows CF Tunnel to access to Cloudflare.',
|
|
11
|
+
ipProtocols: ['TCP', 'UDP'],
|
|
12
|
+
sourceAddresses: cloudflareSubnetSpaces,
|
|
13
13
|
destinationAddresses: [
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
14
|
+
'198.41.192.167',
|
|
15
|
+
'198.41.192.67',
|
|
16
|
+
'198.41.192.57',
|
|
17
|
+
'198.41.192.107',
|
|
18
|
+
'198.41.192.27',
|
|
19
|
+
'198.41.192.7',
|
|
20
|
+
'198.41.192.227',
|
|
21
|
+
'198.41.192.47',
|
|
22
|
+
'198.41.192.37',
|
|
23
|
+
'198.41.192.77',
|
|
24
|
+
'198.41.200.13',
|
|
25
|
+
'198.41.200.193',
|
|
26
|
+
'198.41.200.33',
|
|
27
|
+
'198.41.200.233',
|
|
28
|
+
'198.41.200.53',
|
|
29
|
+
'198.41.200.63',
|
|
30
|
+
'198.41.200.113',
|
|
31
|
+
'198.41.200.73',
|
|
32
|
+
'198.41.200.43',
|
|
33
|
+
'198.41.200.23',
|
|
34
34
|
],
|
|
35
|
-
destinationPorts: [
|
|
35
|
+
destinationPorts: ['7844'],
|
|
36
36
|
});
|
|
37
|
+
if (internalSubnetSpaces) {
|
|
38
|
+
netRules.push({
|
|
39
|
+
ruleType: 'NetworkRule',
|
|
40
|
+
name: `${name}-net-allows-internal`,
|
|
41
|
+
description: 'Allows CF Tunnel to access to internal subnets.',
|
|
42
|
+
ipProtocols: ['TCP', 'UDP'],
|
|
43
|
+
sourceAddresses: cloudflareSubnetSpaces,
|
|
44
|
+
destinationAddresses: internalSubnetSpaces,
|
|
45
|
+
destinationPorts: internalPorts,
|
|
46
|
+
});
|
|
47
|
+
}
|
|
37
48
|
appRules.push({
|
|
38
|
-
ruleType:
|
|
49
|
+
ruleType: 'ApplicationRule',
|
|
39
50
|
name: `${name}-app-allow-cloudflare`,
|
|
40
|
-
description:
|
|
41
|
-
sourceAddresses:
|
|
51
|
+
description: 'Allows CF Tunnel to access to Cloudflare.',
|
|
52
|
+
sourceAddresses: cloudflareSubnetSpaces,
|
|
42
53
|
targetFqdns: [
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
54
|
+
'*.argotunnel.com',
|
|
55
|
+
'*.cftunnel.com',
|
|
56
|
+
'*.cloudflareaccess.com',
|
|
57
|
+
'*.cloudflareresearch.com',
|
|
47
58
|
],
|
|
48
59
|
protocols: [
|
|
49
|
-
{ protocolType:
|
|
50
|
-
{ protocolType:
|
|
60
|
+
{ protocolType: 'Https', port: 443 },
|
|
61
|
+
{ protocolType: 'Https', port: 7844 },
|
|
51
62
|
],
|
|
52
63
|
});
|
|
53
64
|
return (0, FirewallPolicy_1.FirewallPolicyGroup)({
|
|
54
65
|
policy: { name: `${name}-firewall-policy`, netRules, appRules },
|
|
55
66
|
priority,
|
|
56
|
-
action:
|
|
67
|
+
action: 'Allow',
|
|
57
68
|
});
|
|
58
69
|
};
|
|
59
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
70
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -33,18 +33,21 @@ exports.default = ({ name = 'cloud-pc', priority, subnetSpaces, allowsOffice365,
|
|
|
33
33
|
description: 'Allows Cloud PC to access to Azure.',
|
|
34
34
|
ipProtocols: ['TCP', 'UDP'],
|
|
35
35
|
sourceAddresses: subnetSpaces,
|
|
36
|
-
destinationAddresses: [
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
ruleType: 'NetworkRule',
|
|
41
|
-
name: `${name}-net-allows-azure-all`,
|
|
42
|
-
description: 'Allows Cloud PC to access to Azure.',
|
|
43
|
-
ipProtocols: ['TCP', 'UDP'],
|
|
44
|
-
sourceAddresses: subnetSpaces,
|
|
45
|
-
destinationAddresses: [`AzureCloud`],
|
|
36
|
+
destinationAddresses: [
|
|
37
|
+
`AzureCloud.${Common_1.currentRegionCode}`,
|
|
38
|
+
`Sql.${Common_1.currentRegionCode}`,
|
|
39
|
+
],
|
|
46
40
|
destinationPorts: Common_1.allAzurePorts,
|
|
47
41
|
});
|
|
42
|
+
// netRules.push({
|
|
43
|
+
// ruleType: 'NetworkRule',
|
|
44
|
+
// name: `${name}-net-allows-azure-all`,
|
|
45
|
+
// description: 'Allows Cloud PC to access to Azure.',
|
|
46
|
+
// ipProtocols: ['TCP', 'UDP'],
|
|
47
|
+
// sourceAddresses: subnetSpaces,
|
|
48
|
+
// destinationAddresses: [`AzureCloud`],
|
|
49
|
+
// destinationPorts: allAzurePorts,
|
|
50
|
+
// });
|
|
48
51
|
appRules.push({
|
|
49
52
|
ruleType: 'ApplicationRule',
|
|
50
53
|
name: `${name}-app-allow-azure-fqdnTags`,
|
|
@@ -272,4 +275,4 @@ exports.default = ({ name = 'cloud-pc', priority, subnetSpaces, allowsOffice365,
|
|
|
272
275
|
action: 'Allow',
|
|
273
276
|
});
|
|
274
277
|
};
|
|
275
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
278
|
+
//# sourceMappingURL=data:application/json;base64,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
|
package/package.json
CHANGED
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
import { Input } from "@pulumi/pulumi";
|
|
2
|
-
import { FirewallRuleResults } from "../types";
|
|
3
|
-
interface BasicRuleProps {
|
|
4
|
-
startPriority: number;
|
|
5
|
-
}
|
|
6
|
-
interface NatRuleProps extends BasicRuleProps {
|
|
7
|
-
publicIpAddresses: Input<string>[];
|
|
8
|
-
dNATs: [
|
|
9
|
-
{
|
|
10
|
-
name: string;
|
|
11
|
-
allowHttp?: boolean;
|
|
12
|
-
/** Default is '*' to allows all requests */
|
|
13
|
-
sourceIpAddress?: Input<string>;
|
|
14
|
-
internalIpAddress: Input<string>;
|
|
15
|
-
}
|
|
16
|
-
];
|
|
17
|
-
}
|
|
18
|
-
interface AksNetProps extends BasicRuleProps {
|
|
19
|
-
location?: string;
|
|
20
|
-
vnetAddressSpace: Array<Input<string>>;
|
|
21
|
-
}
|
|
22
|
-
export interface AksFirewallProps extends BasicRuleProps, NatRuleProps, AksNetProps {
|
|
23
|
-
}
|
|
24
|
-
declare const _default: ({ startPriority, vnetAddressSpace, ...others }: AksFirewallProps) => FirewallRuleResults;
|
|
25
|
-
export default _default;
|
|
@@ -1,251 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
const types_1 = require("@pulumi/azure-native/types");
|
|
4
|
-
const getDnatRules = ({ startPriority, publicIpAddresses, dNATs, }) => {
|
|
5
|
-
const rules = new Array();
|
|
6
|
-
rules.push({
|
|
7
|
-
name: "dnat-rules",
|
|
8
|
-
action: { type: types_1.enums.network.AzureFirewallNatRCActionType.Dnat },
|
|
9
|
-
priority: ++startPriority,
|
|
10
|
-
rules: dNATs.flatMap((nat) => {
|
|
11
|
-
const httpsRule = {
|
|
12
|
-
name: `${nat.name}-inbound-443`,
|
|
13
|
-
description: `Forward port 443 external IpAddress of ${nat.name} to internal IpAddress`,
|
|
14
|
-
sourceAddresses: [nat.sourceIpAddress ?? "*"],
|
|
15
|
-
destinationAddresses: publicIpAddresses,
|
|
16
|
-
destinationPorts: ["443"],
|
|
17
|
-
protocols: ["TCP"],
|
|
18
|
-
translatedAddress: nat.internalIpAddress,
|
|
19
|
-
translatedPort: "443",
|
|
20
|
-
};
|
|
21
|
-
const httpRule = {
|
|
22
|
-
name: `${nat.name}-inbound-80`,
|
|
23
|
-
description: `Forward port 80 external IpAddress of ${nat.name} to internal IpAddress`,
|
|
24
|
-
sourceAddresses: [nat.sourceIpAddress ?? "*"],
|
|
25
|
-
destinationAddresses: publicIpAddresses,
|
|
26
|
-
destinationPorts: ["80"],
|
|
27
|
-
protocols: ["TCP"],
|
|
28
|
-
translatedAddress: nat.internalIpAddress,
|
|
29
|
-
translatedPort: "80",
|
|
30
|
-
};
|
|
31
|
-
return nat.allowHttp ? [httpsRule, httpRule] : [httpsRule];
|
|
32
|
-
}),
|
|
33
|
-
});
|
|
34
|
-
return rules;
|
|
35
|
-
};
|
|
36
|
-
const getAksNetRules = ({ startPriority, location = "SoutheastAsia", vnetAddressSpace, }) => {
|
|
37
|
-
location = location.toLowerCase();
|
|
38
|
-
const rules = new Array();
|
|
39
|
-
//============= Standard Rules for AKS ================== //
|
|
40
|
-
//https://docs.microsoft.com/en-us/azure/aks/limit-egress-traffic
|
|
41
|
-
rules.push({
|
|
42
|
-
name: "aks-net-rules",
|
|
43
|
-
action: { type: types_1.enums.network.AzureFirewallRCActionType.Allow },
|
|
44
|
-
priority: ++startPriority,
|
|
45
|
-
rules: [
|
|
46
|
-
// {
|
|
47
|
-
// name: 'aks-vpn',
|
|
48
|
-
// description:
|
|
49
|
-
// 'For OPEN VPN tunneled secure communication between the nodes and the control plane for AzureCloud.SoutheastAsia',
|
|
50
|
-
// protocols: ['UDP'],
|
|
51
|
-
// sourceAddresses: vnetAddressSpace,
|
|
52
|
-
// destinationAddresses: [`AzureCloud.${location}`],
|
|
53
|
-
// destinationPorts: ['1194'],
|
|
54
|
-
// },
|
|
55
|
-
{
|
|
56
|
-
name: "aks-tcp",
|
|
57
|
-
description: "For tunneled secure communication between the nodes and the control plane for AzureCloud.SoutheastAsia",
|
|
58
|
-
protocols: ["TCP"],
|
|
59
|
-
sourceAddresses: vnetAddressSpace,
|
|
60
|
-
destinationAddresses: [`AzureCloud.${location}`],
|
|
61
|
-
destinationPorts: ["443", "9000"],
|
|
62
|
-
},
|
|
63
|
-
{
|
|
64
|
-
name: "aks-time",
|
|
65
|
-
description: "Required for Network Time Protocol (NTP) time synchronization on Linux nodes.",
|
|
66
|
-
protocols: ["UDP"],
|
|
67
|
-
sourceAddresses: vnetAddressSpace,
|
|
68
|
-
destinationFqdns: ["ntp.ubuntu.com"],
|
|
69
|
-
destinationPorts: ["123"],
|
|
70
|
-
},
|
|
71
|
-
// {
|
|
72
|
-
// name: "aks-time_others",
|
|
73
|
-
// description:
|
|
74
|
-
// "Required for Network Time Protocol (NTP) time synchronization on Linux nodes.",
|
|
75
|
-
// protocols: ["UDP"],
|
|
76
|
-
// sourceAddresses: vnetAddressSpace,
|
|
77
|
-
// destinationAddresses: ["*"],
|
|
78
|
-
// destinationPorts: ["123"],
|
|
79
|
-
// },
|
|
80
|
-
// {
|
|
81
|
-
// name: 'aks-control-server',
|
|
82
|
-
// description:
|
|
83
|
-
// 'Required if running pods/deployments that access the API Server, those pods/deployments would use the API IP.',
|
|
84
|
-
// protocols: ['TCP'],
|
|
85
|
-
// sourceAddresses: vnetAddressSpace,
|
|
86
|
-
// destinationAddresses: ['10.0.0.0/16'],//Ask default is '10.0.0.0/16'
|
|
87
|
-
// destinationPorts: ['443', '10250', '10251'],
|
|
88
|
-
// },
|
|
89
|
-
{
|
|
90
|
-
name: "azure-services-tags",
|
|
91
|
-
description: "Allows internal services to connect to Azure Resources.",
|
|
92
|
-
protocols: ["TCP"],
|
|
93
|
-
sourceAddresses: vnetAddressSpace,
|
|
94
|
-
destinationAddresses: [
|
|
95
|
-
"AzureContainerRegistry.SoutheastAsia",
|
|
96
|
-
"MicrosoftContainerRegistry.SoutheastAsia",
|
|
97
|
-
"AzureActiveDirectory",
|
|
98
|
-
"AzureMonitor.SoutheastAsia",
|
|
99
|
-
"AppConfiguration",
|
|
100
|
-
"AzureKeyVault.SoutheastAsia",
|
|
101
|
-
//'AzureSignalR', This already using private endpoint
|
|
102
|
-
//'DataFactory.SoutheastAsia',
|
|
103
|
-
//'EventHub.SoutheastAsia',
|
|
104
|
-
"ServiceBus.SoutheastAsia",
|
|
105
|
-
//'Sql.SoutheastAsia', This already using private endpoint
|
|
106
|
-
"Storage.SoutheastAsia",
|
|
107
|
-
],
|
|
108
|
-
destinationPorts: ["443"],
|
|
109
|
-
},
|
|
110
|
-
{
|
|
111
|
-
name: "others-dns",
|
|
112
|
-
description: "Others DNS.",
|
|
113
|
-
protocols: ["TCP", "UDP"],
|
|
114
|
-
sourceAddresses: vnetAddressSpace,
|
|
115
|
-
destinationAddresses: ["*"],
|
|
116
|
-
destinationPorts: ["53"],
|
|
117
|
-
},
|
|
118
|
-
],
|
|
119
|
-
});
|
|
120
|
-
return rules;
|
|
121
|
-
};
|
|
122
|
-
const getAksAppRules = ({ startPriority, vnetAddressSpace, }) => {
|
|
123
|
-
const rules = new Array();
|
|
124
|
-
//============= Standard Rules for AKS ================== //
|
|
125
|
-
//https://docs.microsoft.com/en-us/azure/aks/limit-egress-traffic
|
|
126
|
-
//AzureKubernetesService
|
|
127
|
-
rules.push({
|
|
128
|
-
name: "aks-services-fqdn-rules",
|
|
129
|
-
action: { type: types_1.enums.network.AzureFirewallRCActionType.Allow },
|
|
130
|
-
priority: ++startPriority,
|
|
131
|
-
rules: [
|
|
132
|
-
{
|
|
133
|
-
name: "aks-services",
|
|
134
|
-
description: "Allows pods to access AzureKubernetesService",
|
|
135
|
-
sourceAddresses: vnetAddressSpace,
|
|
136
|
-
//AzureKubernetesService is allow to access google.com
|
|
137
|
-
fqdnTags: ["AzureKubernetesService"],
|
|
138
|
-
},
|
|
139
|
-
{
|
|
140
|
-
name: "aks-fqdn",
|
|
141
|
-
description: "Azure Global required FQDN",
|
|
142
|
-
sourceAddresses: vnetAddressSpace,
|
|
143
|
-
targetFqdns: [
|
|
144
|
-
//AKS mater
|
|
145
|
-
"*.hcp.southeastasia.azmk8s.io",
|
|
146
|
-
//Microsoft Container Registry
|
|
147
|
-
"mcr.microsoft.com",
|
|
148
|
-
"data.mcr.microsoft.com",
|
|
149
|
-
"*.data.mcr.microsoft.com",
|
|
150
|
-
//Azure management
|
|
151
|
-
"management.azure.com",
|
|
152
|
-
"login.microsoftonline.com",
|
|
153
|
-
//Microsoft trusted package repository
|
|
154
|
-
"packages.microsoft.com",
|
|
155
|
-
//Azure CDN
|
|
156
|
-
"acs-mirror.azureedge.net",
|
|
157
|
-
//CosmosDb
|
|
158
|
-
"*.documents.azure.com",
|
|
159
|
-
],
|
|
160
|
-
protocols: [{ protocolType: "Https", port: 443 }],
|
|
161
|
-
},
|
|
162
|
-
{
|
|
163
|
-
name: "azure-monitors",
|
|
164
|
-
sourceAddresses: vnetAddressSpace,
|
|
165
|
-
targetFqdns: [
|
|
166
|
-
"dc.services.visualstudio.com",
|
|
167
|
-
"*.ods.opinsights.azure.com",
|
|
168
|
-
"*.oms.opinsights.azure.com",
|
|
169
|
-
"*.monitoring.azure.com",
|
|
170
|
-
"*.services.visualstudio.com",
|
|
171
|
-
],
|
|
172
|
-
protocols: [{ protocolType: "Https", port: 443 }],
|
|
173
|
-
},
|
|
174
|
-
{
|
|
175
|
-
name: "azure-policy",
|
|
176
|
-
sourceAddresses: vnetAddressSpace,
|
|
177
|
-
targetFqdns: [
|
|
178
|
-
"*.policy.core.windows.net",
|
|
179
|
-
"gov-prod-policy-data.trafficmanager.net",
|
|
180
|
-
"raw.githubusercontent.com",
|
|
181
|
-
"dc.services.visualstudio.com",
|
|
182
|
-
],
|
|
183
|
-
protocols: [{ protocolType: "Https", port: 443 }],
|
|
184
|
-
},
|
|
185
|
-
{
|
|
186
|
-
//TODO Allow Docker Access is potential risk once we have budget and able to upload external images to ACR then remove docker.
|
|
187
|
-
name: "docker-services",
|
|
188
|
-
sourceAddresses: vnetAddressSpace,
|
|
189
|
-
targetFqdns: [
|
|
190
|
-
"quay.io", //For Cert Manager
|
|
191
|
-
"*.quay.io",
|
|
192
|
-
"auth.docker.io",
|
|
193
|
-
"*.auth.docker.io",
|
|
194
|
-
"*.cloudflare.docker.io",
|
|
195
|
-
"docker.io",
|
|
196
|
-
"cloudflare.docker.io",
|
|
197
|
-
"cloudflare.docker.com",
|
|
198
|
-
"*.cloudflare.docker.com",
|
|
199
|
-
"*.registry-1.docker.io",
|
|
200
|
-
"registry-1.docker.io",
|
|
201
|
-
],
|
|
202
|
-
protocols: [{ protocolType: "Https", port: 443 }],
|
|
203
|
-
},
|
|
204
|
-
{
|
|
205
|
-
//TODO Allow external registry is potential risk once we have budget and able to upload external images to ACR then remove docker.
|
|
206
|
-
name: "k8s-services",
|
|
207
|
-
sourceAddresses: vnetAddressSpace,
|
|
208
|
-
targetFqdns: [
|
|
209
|
-
"k8s.gcr.io", //nginx images
|
|
210
|
-
"*.k8s.io",
|
|
211
|
-
"asia-east1-docker.pkg.dev",
|
|
212
|
-
"*.gcr.io",
|
|
213
|
-
"*.googleapis.com",
|
|
214
|
-
],
|
|
215
|
-
protocols: [{ protocolType: "Https", port: 443 }],
|
|
216
|
-
},
|
|
217
|
-
{
|
|
218
|
-
name: "ubuntu-services",
|
|
219
|
-
sourceAddresses: vnetAddressSpace,
|
|
220
|
-
targetFqdns: [
|
|
221
|
-
"security.ubuntu.com",
|
|
222
|
-
"azure.archive.ubuntu.com",
|
|
223
|
-
"changelogs.ubuntu.com",
|
|
224
|
-
],
|
|
225
|
-
protocols: [{ protocolType: "Https", port: 443 }],
|
|
226
|
-
},
|
|
227
|
-
],
|
|
228
|
-
});
|
|
229
|
-
return rules;
|
|
230
|
-
};
|
|
231
|
-
exports.default = ({ startPriority, vnetAddressSpace, ...others }) => {
|
|
232
|
-
const natRuleCollections = getDnatRules({
|
|
233
|
-
startPriority,
|
|
234
|
-
...others,
|
|
235
|
-
});
|
|
236
|
-
const networkRuleCollections = getAksNetRules({
|
|
237
|
-
startPriority,
|
|
238
|
-
vnetAddressSpace,
|
|
239
|
-
...others,
|
|
240
|
-
});
|
|
241
|
-
const applicationRuleCollections = getAksAppRules({
|
|
242
|
-
startPriority,
|
|
243
|
-
vnetAddressSpace,
|
|
244
|
-
});
|
|
245
|
-
return {
|
|
246
|
-
natRuleCollections,
|
|
247
|
-
networkRuleCollections,
|
|
248
|
-
applicationRuleCollections,
|
|
249
|
-
};
|
|
250
|
-
};
|
|
251
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,23 +0,0 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.deniedOthersRule = void 0;
|
|
4
|
-
const types_1 = require("@pulumi/azure-native/types");
|
|
5
|
-
exports.deniedOthersRule = {
|
|
6
|
-
name: 'firewall-deny-others-fqdn-rules',
|
|
7
|
-
action: { type: types_1.enums.network.AzureFirewallRCActionType.Deny },
|
|
8
|
-
priority: 6001,
|
|
9
|
-
rules: [
|
|
10
|
-
{
|
|
11
|
-
name: 'deny-others-websites',
|
|
12
|
-
description: 'Denied all others websites',
|
|
13
|
-
sourceAddresses: ['*'],
|
|
14
|
-
targetFqdns: ['*'],
|
|
15
|
-
protocols: [
|
|
16
|
-
{ protocolType: 'Http', port: 80 },
|
|
17
|
-
{ protocolType: 'Https', port: 443 },
|
|
18
|
-
{ protocolType: 'Mssql', port: 1433 },
|
|
19
|
-
],
|
|
20
|
-
},
|
|
21
|
-
],
|
|
22
|
-
};
|
|
23
|
-
//# sourceMappingURL=data:application/json;base64,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
|