Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: november 2024 release #1201

Merged
merged 11 commits into from
Nov 13, 2024
Merged

feat: november 2024 release #1201

merged 11 commits into from
Nov 13, 2024

Conversation

matt-FFFFFF
Copy link
Member

@matt-FFFFFF matt-FFFFFF commented Nov 13, 2024

Azure Landing Zones policy refresh https://github.com/Azure/Enterprise-Scale/releases/tag/2024-11-05

And other minor improvements:

This PR fixes/adds/changes/removes

  1. includes Update Library Templates (automated) #1200
  2. includes Add new regions to geo_codes #1183
  3. includes Fixes #1135 and #1136 #1137
  4. includes management/log-analytics: Allow users to set a daily GB cap #1143
  5. fixes Data collection rule are missing from module outputs #1171
  6. fixes Management Group Diagnostic Settings recreated every deployment #1170
  7. fixes Bug Report - SQL Auditing Policy assignment does not have permissions to create Diagnostic Settings for management Log Analytics workspace #1185
  8. fixes Defender for Cloud VM plan 1 or 2 #1176

image

image

Testing Evidence

Please provide any testing evidence to show that your Pull Request works/fixes as described and planned (include screenshots, if appropriate).

As part of this Pull Request I have

  • Checked for duplicate Pull Requests
  • Associated it with relevant issues, for tracking and closure.
  • Ensured my code/branch is up-to-date with the latest changes in the main branch
  • Performed testing and provided evidence.
  • Updated relevant and associated documentation.

cae-pr-creator bot and others added 5 commits November 13, 2024 09:58
This is an automated 'pull_request' containing updates to the library
templates stored in 'modules/archetypes/lib'.
 Please review the 'files changed' tab to review changes.

Co-authored-by: github-actions <action@github.com>
<!-- markdownlint-disable first-line-h1 -->

<!-- Thank you for submitting a Pull Request. Please fill out the
template below.-->
## Overview/Summary

This is a short PR to update `locals.geo_codes.tf.json`, to support the
new Azure regions launched in the last year or so (Brazil US, Spain
Central, Israel Central, Mexico Central, New Zealand North, and Poland
Central).

I've used the ISO 3166 codes, and thankfully there aren't any clashes
with existing, or 'informal' shortcodes.

## As part of this Pull Request I have

- [X] Checked for duplicate [Pull
Requests](https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/pulls)
- [N/A] Associated it with relevant
[issues](https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/issues),
for tracking and closure.
- [X] Ensured my code/branch is up-to-date with the latest changes in
the `main`
[branch](https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/tree/main)
- [N/A] Performed testing and provided evidence.
- [N/A] Updated relevant and associated documentation.
<!-- markdownlint-disable first-line-h1 -->

<!-- Thank you for submitting a Pull Request. Please fill out the
template below.-->
## Overview/Summary

Replace this with a brief description of what this Pull Request fixes,
changes, etc.

## This PR fixes/adds/changes/removes

1. Fixes #1135 - Race condition results in InternalServerError when
deploying in vhub a firewall, an express route gateway, vhub peering and
routing intent
2. Fixes #1136 - Updating existing vnet dns_server with Azure firewall
leads to azurerm_virtual_network error.
3. *Replace me*

### Breaking Changes

none

## Testing Evidence

```
module.alz_connectivity.azurerm_virtual_hub_routing_intent.virtual_wan["/subscriptions/000000/resourceGroups/rg-prod-network-vwan/providers/Microsoft.Network/virtualHubs/lz-cl-hub-southeastasia/lz-cl-routingintent-southeastasia"]: Still creating... [6m40s elapsed]
module.alz_connectivity.azurerm_virtual_hub_routing_intent.virtual_wan["/subscriptions/000000/resourceGroups/rg-prod-network-vwan/providers/Microsoft.Network/virtualHubs/lz-cl-hub-southeastasia/lz-cl-routingintent-southeastasia"]: Creation complete after 6m41s [id=/subscriptions/000000/resourceGroups/rg-prod-network-vwan/providers/Microsoft.Network/virtualHubs/lz-cl-hub-southeastasia/routingIntent/lz-cl-routingintent-southeastasia]

Apply complete! Resources: 178 added, 0 changed, 0 destroyed.
```

Please provide any testing evidence to show that your Pull Request
works/fixes as described and planned (include screenshots, if
appropriate).

## As part of this Pull Request I have

- [x] Checked for duplicate [Pull
Requests](https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/pulls)
- [x] Associated it with relevant
[issues](https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/issues),
for tracking and closure.
- [x] Ensured my code/branch is up-to-date with the latest changes in
the `main`
[branch](https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/tree/main)
- [x] Performed testing and provided evidence.
- [x] Updated relevant and associated documentation.
setting `retention_in_days` worked OK, but setting `daily_quota_gb` did
not. We configured the daily cap from the Azure Portal but this
automation rolls it back to be disabled. This PR makes it so we can set
a value for our environment, and it is not rolled back.

```terraform
  # module.alz.azurerm_log_analytics_workspace.management["/subscriptions/96f9ca86-6842-4c2f-aada-2daafa1b0b9c/resourceGroups/redpanda-mgmt/providers/Microsoft.OperationalInsights/workspaces/redpanda-la"] will be updated in-place
  ~ resource "azurerm_log_analytics_workspace" "management" {
      ~ daily_quota_gb                          = 64 -> -1
        id                                      = "/subscriptions/96f9ca86-6842-4c2f-aada-2daafa1b0b9c/resourceGroups/redpanda-mgmt/providers/Microsoft.OperationalInsights/workspaces/redpanda-la"
        name                                    = "redpanda-la"
        tags                                    = {
            "deployedBy"   = "terraform/azure/caf-enterprise-scale"
            "redpanda-org" = "azure-governance"
        }
        # (14 unchanged attributes hidden)
    }

```
@matt-FFFFFF matt-FFFFFF linked an issue Nov 13, 2024 that may be closed by this pull request
@matt-FFFFFF matt-FFFFFF linked an issue Nov 13, 2024 that may be closed by this pull request
@matt-FFFFFF
Copy link
Member Author

/azp run unit

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@matt-FFFFFF
Copy link
Member Author

/azp run unit

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@matt-FFFFFF
Copy link
Member Author

/azp run unit

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

Copy link
Member

@jaredfholgate jaredfholgate left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

resources.management_groups.tf Show resolved Hide resolved
@matt-FFFFFF matt-FFFFFF merged commit c1eef34 into main Nov 13, 2024
16 checks passed
@matt-FFFFFF matt-FFFFFF deleted the release/Nov2024 branch November 13, 2024 13:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment