Merged
Conversation
…les for containers
…rtual network configuration - Deleted obsolete Bicep files: network.bicep, bastionHost.bicep, jumpbox.bicep, main.bicep, and virtualNetwork.bicep. - Introduced a new virtualNetwork.bicep file with updated subnet configurations and security rules. - Streamlined the creation of Azure Bastion and Jumpbox resources within the new structure. - Enhanced documentation and best practices for subnet sizing and security group configurations.
Roopan-Microsoft
approved these changes
Oct 20, 2025
Roopan-Microsoft
requested review from
Avijit-Microsoft,
Dongbumlee,
Vinay-Microsoft,
aniaroramsft and
sethsteenken
as code owners
|
🎉 This PR is included in version 1.0.0 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Purpose
This pull request introduces significant improvements to the Azure infrastructure codebase, focusing on enhanced network configuration, parameterization, and support for security and scalability. The most important changes include the addition of a comprehensive virtual network module with detailed subnet and NSG definitions, expanded deployment parameters for both main and WAF templates, and improved support for secure VM access.
Infrastructure and Networking Enhancements:
virtualNetwork.bicepmodule that defines multiple subnets (containers, backend, Azure Bastion, jumpbox), each with tailored Network Security Group (NSG) rules, delegation, and policies. This includes outputs for subnet and NSG resource IDs, as well as custom type definitions for subnet and NSG configurations.Parameterization and Deployment Improvements:
main.parameters.jsonto include new parameters for monitoring, private networking, scalability, and VM admin credentials, enabling more flexible and secure deployments.main.waf.parameters.jsontemplate with a full set of deployment parameters, including AI model configuration, telemetry, monitoring, networking, scalability, and VM admin credentials, supporting WAF-specific deployments.Does this introduce a breaking change?
Golden Path Validation
Deployment Validation
What to Check
Verify that the following are valid
Other Information