feat: Multi region support for accelerator #1543
Annotations
10 errors and 10 warnings
|
Run PSRule analysis
Failed to expand bicep source '/home/runner/work/ALZ-Bicep/ALZ-Bicep/accelerator/multi_region_modules/hubNetworking/samples/baseline.sample.bicep'. Exception calling "GetBicepResources" with "2" argument(s): "Unable to expand resources because the source file '/home/runner/work/ALZ-Bicep/ALZ-Bicep/accelerator/multi_region_modules/hubNetworking/samples/baseline.sample.bicep' was not valid. An error occurred evaluating expression '[if(equals(toLower(variables('varGwConfig')[copyIndex()].gatewayType), 'vpn'), createObject('vpnClientAddressPool', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'vpnClientAddressPool'), ''), 'vpnClientProtocols', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'vpnClientProtocols'), ''), 'vpnAuthenticationTypes', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'vpnAuthenticationTypes'), ''), 'aadTenant', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'aadTenant'), ''), 'aadAudience', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'aadAudience'), ''), 'aadIssuer', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'aadIssuer'), ''), 'vpnClientRootCertificates', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'vpnClientRootCertificates'), ''), 'radiusServerAddress', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'radiusServerAddress'), ''), 'radiusServerSecret', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'radiusServerSecret'), '')), null())]' line 11372. The language expression property 'vpnClientConfiguration' doesn't exist."
|
|
Run PSRule analysis
Bicep (0.29.47) compilation of '/home/runner/work/ALZ-Bicep/ALZ-Bicep/accelerator/multi_region_modules/hubNetworking/samples/minimum.sample.bicep' failed with: /home/runner/work/ALZ-Bicep/ALZ-Bicep/accelerator/multi_region_modules/hubNetworking/samples/minimum.sample.bicep(21,28) : Error BCP091: An error occurred reading file. Could not find file '/home/runner/work/ALZ-Bicep/ALZ-Bicep/accelerator/multi_region_modules/hubNetworking/hubNetworking.bicep'.
|
|
Run PSRule analysis
Failed to expand bicep source '/home/runner/work/ALZ-Bicep/ALZ-Bicep/infra-as-code/bicep/modules/hubNetworking/samples/baseline.sample.bicep'. Exception calling "GetBicepResources" with "2" argument(s): "Unable to expand resources because the source file '/home/runner/work/ALZ-Bicep/ALZ-Bicep/infra-as-code/bicep/modules/hubNetworking/samples/baseline.sample.bicep' was not valid. An error occurred evaluating expression '[if(equals(toLower(variables('varGwConfig')[copyIndex()].gatewayType), 'vpn'), createObject('vpnClientAddressPool', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'vpnClientAddressPool'), ''), 'vpnClientProtocols', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'vpnClientProtocols'), ''), 'vpnAuthenticationTypes', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'vpnAuthenticationTypes'), ''), 'aadTenant', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'aadTenant'), ''), 'aadAudience', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'aadAudience'), ''), 'aadIssuer', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'aadIssuer'), ''), 'vpnClientRootCertificates', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'vpnClientRootCertificates'), ''), 'radiusServerAddress', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'radiusServerAddress'), ''), 'radiusServerSecret', coalesce(tryGet(variables('varGwConfig')[copyIndex()].vpnClientConfiguration, 'radiusServerSecret'), '')), null())]' line 6251. The language expression property 'vpnClientConfiguration' doesn't exist."
|
|
Run PSRule analysis
AZR-000272: alz-Vpn-Gateway failed Azure.VNG.VPNAvailabilityZoneSKU. Use availability zone SKU for virtual network gateways deployed with VPN gateway type.
|
|
Run PSRule analysis
AZR-000430: alz-Vpn-Gateway failed Azure.VNG.MaintenanceConfig. Use a customer-controlled maintenance configuration for virtual network gateways.
|
|
Run PSRule analysis
AZR-000270: alz-Vpn-Gateway failed Azure.VNG.VPNActiveActive. Use VPN gateways configured to operate in an Active-Active configuration to reduce connectivity downtime.
|
|
Run PSRule analysis
AZR-000430: alz-ExpressRoute-Gateway failed Azure.VNG.MaintenanceConfig. Use a customer-controlled maintenance configuration for virtual network gateways.
|
|
Run PSRule analysis
AZR-000399: alz-azfwpolicy-eastus failed Azure.Firewall.PolicyMode. Deny high confidence malicious IP addresses, domains and URLs.
|
|
Run PSRule analysis
AZR-000429: alz-azfw-eastus failed Azure.Firewall.AvailabilityZone. Deploy firewall instances using availability zones in supported regions to ensure high availability and resilience.
|
|
Run PSRule analysis
AZR-000157: [format('{0}-Vpn-Gateway', parameters('parCompanyPrefix'))]-PublicIP failed Azure.PublicIP.AvailabilityZone. Public IP addresses deployed with Standard SKU should use availability zones in supported regions for high availability.
|
|
Run PSRule analysis
Using invariant culture may cause rule infomation to be displayed incorrectly. Consider using -Culture or set the Output.Culture option.
|
|
Run PSRule analysis
The option 'Execution.NotProcessedWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.
|
|
Run PSRule analysis
Rule 'PSRule.Rules.Azure\Azure.NSG.LateralTraversal' was suppressed by suppression group '.\ALZ.NSGForBastion' for 'nsg-AzureBastionSubnet'. Ignore NSG lateral movement rule for Azure Bastion as this is needed for Bastion to work.
|
|
Run PSRule analysis
Rule 'PSRule.Rules.Azure\Azure.PublicIP.AvailabilityZone' was suppressed by suppression group '.\ALZ.PublicIPForBastion' for 'alz-bastion-PublicIP'. Ignore availability zones for Azure Bastion public IP which is not supported. https://github.com/Azure/PSRule.Rules.Azure/issues/1442
|
|
Run PSRule analysis
Rule 'PSRule.Rules.Azure\Azure.VNET.UseNSGs' was suppressed by suppression group '.\ALZ.MinimumSample' for 'pip-minimum-ip'. Ignore the minimum sample configuration.
|
|
Run PSRule analysis
Rule 'PSRule.Rules.Azure\Azure.PublicIP.AvailabilityZone' was suppressed by suppression group '.\ALZ.MinimumSample' for 'pip-minimum-ip'. Ignore the minimum sample configuration.
|
|
Run PSRule analysis
Rule 'PSRule.Rules.Azure\Azure.VNG.VPNAvailabilityZoneSKU' was suppressed by suppression group '.\ALZ.MinimumSample' for 'pip-minimum-ip'. Ignore the minimum sample configuration.
|
|
Run PSRule analysis
Rule 'PSRule.Rules.Azure\Azure.VNG.VPNActiveActive' was suppressed by suppression group '.\ALZ.MinimumSample' for 'pip-minimum-ip'. Ignore the minimum sample configuration.
|
|
Run PSRule analysis
Rule 'PSRule.Rules.Azure\Azure.Firewall.Mode' was suppressed by suppression group '.\ALZ.MinimumSample' for 'pip-minimum-ip'. Ignore the minimum sample configuration.
|
|
Run PSRule analysis
Rule 'PSRule.Rules.Azure\Azure.PublicIP.StandardSKU' was suppressed by suppression group '.\ALZ.MinimumSample' for 'pip-minimum-ip'. Ignore the minimum sample configuration.
|
Loading