Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix public exposure in Guacamole service #4236

Merged
merged 8 commits into from
Jan 2, 2025

Conversation

ShakutaiGit
Copy link
Collaborator

@ShakutaiGit ShakutaiGit commented Dec 31, 2024

Resolves #4199

What is being addressed

The current behavior does not allow for dynamic configuration of the public_network_access_enabled parameter in the Guacamole workspace template.
This parameter is critical for determining whether the service should be exposed externally or restricted to internal access only.

How is this addressed

  • Introduced the public_network_access_enabled parameter with a default value of false to prevent public exposure by default.
  • Updated web_app.tf to map the parameter to var.is_exposed_externally.
  • Moved Azure Service Plan data retrieval to data.tf for better organization.
  • Updated documentation and incremented the template version.

Copy link

github-actions bot commented Dec 31, 2024

Unit Test Results

0 tests   0 ✅  0s ⏱️
0 suites  0 💤
0 files    0 ❌

Results for commit 47b233e.

♻️ This comment has been updated with latest results.

@ShakutaiGit ShakutaiGit changed the title Update Guacamole service exposure settings and change the service pla… Bug fix: Resolved public exposure issue in Guacamole service Dec 31, 2024
@tamirkamara tamirkamara changed the title Bug fix: Resolved public exposure issue in Guacamole service Fix public exposure in Guacamole service Dec 31, 2024
@ShakutaiGit ShakutaiGit marked this pull request as ready for review December 31, 2024 15:19
@ShakutaiGit
Copy link
Collaborator Author

/test-extended

Copy link

🤖 pr-bot 🤖

🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12561666906 (with refid 0a106d24)

(in response to this comment from @ShakutaiGit)

@ShakutaiGit ShakutaiGit self-assigned this Dec 31, 2024
Copy link

🤖 pr-bot 🤖

🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12561666906 (with refid 0a106d24)

(in response to this comment from @ShakutaiGit)

@ShakutaiGit
Copy link
Collaborator Author

/test-extended

Copy link

🤖 pr-bot 🤖

🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12562335261 (with refid 0a106d24)

(in response to this comment from @ShakutaiGit)

@ShakutaiGit ShakutaiGit enabled auto-merge (squash) January 1, 2025 08:53
@ShakutaiGit
Copy link
Collaborator Author

/test-extended

Copy link

github-actions bot commented Jan 1, 2025

🤖 pr-bot 🤖

🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12569060271 (with refid 0a106d24)

(in response to this comment from @ShakutaiGit)

@ShakutaiGit
Copy link
Collaborator Author

/test-extended

Copy link

github-actions bot commented Jan 1, 2025

🤖 pr-bot 🤖

🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12569920962 (with refid 0a106d24)

(in response to this comment from @ShakutaiGit)

@ShakutaiGit
Copy link
Collaborator Author

/help

Copy link

github-actions bot commented Jan 1, 2025

🤖 pr-bot 🤖

Hello!

You can use the following commands:
    /test - build, deploy and run smoke tests on a PR
    /test-extended - build, deploy and run smoke & extended tests on a PR
    /test-extended-aad - build, deploy and run smoke & extended AAD tests on a PR
    /test-shared-services - test the deployment of shared services on a PR build
    /test-force-approve - force approval of the PR tests (i.e. skip the deployment checks)
    /test-destroy-env - delete the validation environment for a PR (e.g. to enable testing a deployment from a clean start after previous tests)
    /help - show this help

(in response to this comment from @ShakutaiGit)

@ShakutaiGit
Copy link
Collaborator Author

/test-destroy-env

Copy link

github-actions bot commented Jan 1, 2025

Destroying PR test environment (RG: rg-tre0a106d24)... (run: https://github.com/microsoft/AzureTRE/actions/runs/12570062604)

Copy link

github-actions bot commented Jan 1, 2025

Destroying branch test environment (RG: rg-trecfb25c6d)... (run: https://github.com/microsoft/AzureTRE/actions/runs/12570062604)

Copy link

github-actions bot commented Jan 1, 2025

Branch test environment destroy complete (RG: rg-trecfb25c6d)

Copy link

github-actions bot commented Jan 1, 2025

PR test environment destroy complete (RG: rg-tre0a106d24)

@ShakutaiGit
Copy link
Collaborator Author

/test-extended

Copy link

github-actions bot commented Jan 1, 2025

🤖 pr-bot 🤖

🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12570286147 (with refid 0a106d24)

(in response to this comment from @ShakutaiGit)

1 similar comment
Copy link

github-actions bot commented Jan 1, 2025

🤖 pr-bot 🤖

🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12570286147 (with refid 0a106d24)

(in response to this comment from @ShakutaiGit)

@ShakutaiGit
Copy link
Collaborator Author

/test-extended

Copy link

github-actions bot commented Jan 2, 2025

🤖 pr-bot 🤖

🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12579100697 (with refid 0a106d24)

(in response to this comment from @ShakutaiGit)

@ShakutaiGit
Copy link
Collaborator Author

/test-force-approve

Copy link

github-actions bot commented Jan 2, 2025

🤖 pr-bot 🤖

✅ Marking tests as complete (for commit 47b233e)

(in response to this comment from @ShakutaiGit)

@ShakutaiGit ShakutaiGit merged commit c79d9e1 into main Jan 2, 2025
12 checks passed
@ShakutaiGit ShakutaiGit deleted the fix_exposed_externally_guacamole branch January 2, 2025 09:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Guacamole "exposed_external" flag not working correctly.
3 participants