add private only feature to azure bastion service

Azure · Oct 1, 2024 · 4a6b080 · 4a6b080
1 parent 59bd02e
commit 4a6b080
Show file tree

Hide file tree

Showing 10 changed files with 266 additions and 9 deletions.
diff --git a/specification/network/resource-manager/Microsoft.Network/stable/2024-05-01/bastionHost.json b/specification/network/resource-manager/Microsoft.Network/stable/2024-05-01/bastionHost.json
@@ -128,6 +128,9 @@
           },
           "Get Bastion Host With Zones": {
             "$ref": "./examples/BastionHostGetWithZones.json"
+          },
+          "Get Bastion Host With Private Only": {
+            "$ref": "./examples/BastionHostGetWithPrivateOnly.json"
           }
         }
       },
@@ -187,6 +190,9 @@
           "Create Bastion Host With Zones": {
             "$ref": "./examples/BastionHostPutWithZones.json"
           },
+          "Create Bastion Host With Private Only": {
+            "$ref": "./examples/BastionHostPutWithPrivateOnly.json"
+          },
           "Create Developer Bastion Host": {
             "$ref": "./examples/BastionHostDeveloperPut.json"
           }
@@ -681,7 +687,7 @@
         },
         "publicIPAddress": {
           "$ref": "./network.json#/definitions/SubResource",
-          "description": "Reference of the PublicIP resource."
+          "description": "Reference of the PublicIP resource. Null for private only bastion"
         },
         "provisioningState": {
           "readOnly": true,
@@ -694,8 +700,7 @@
         }
       },
       "required": [
-        "subnet",
-        "publicIPAddress"
+        "subnet"
       ],
       "description": "Properties of IP configuration of an Bastion Host."
     },
@@ -803,6 +808,11 @@
           "type": "boolean",
           "default": false,
           "description": "Enable/Disable Session Recording feature of the Bastion Host resource."
+        },
+        "enablePrivateOnlyBastion": {
+          "type": "boolean",
+          "default": false,
+          "description": "Enable/Disable Private Only feature of the Bastion Host resource."
         }
       },
       "description": "Properties of the Bastion Host."

diff --git a/...network/resource-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostGet.json b/...network/resource-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostGet.json
@@ -30,6 +30,7 @@
           "enableShareableLink": false,
           "enableKerberos": false,
           "enableSessionRecording": false,
+          "enablePrivateOnlyBastion": false,
           "ipConfigurations": [
             {
               "name": "bastionHostIpConfiguration",

diff --git a/...e-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostGetWithPrivateOnly.json b/...e-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostGetWithPrivateOnly.json
@@ -0,0 +1,53 @@
+{
+    "parameters": {
+      "api-version": "2024-01-01",
+      "subscriptionId": "subid",
+      "resourceGroupName": "rg1",
+      "bastionHostName": "bastionhosttenant"
+    },
+    "responses": {
+      "200": {
+        "body": {
+          "name": "bastionhosttenant",
+          "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhosttenant'",
+          "type": "Microsoft.Network/bastionHosts",
+          "etag": "w/\\00000000-0000-0000-0000-000000000000\\",
+          "location": "West US",
+          "tags": {
+            "key1": "value1"
+          },
+          "sku": {
+            "name": "Premium"
+          },
+          "zones": [],
+          "properties": {
+            "provisioningState": "Succeeded",
+            "dnsName": "bst-9d89d361-100e-4c01-b92d-466548c476dc.bastion.azure.com",
+            "scaleUnits": 2,
+            "disableCopyPaste": false,
+            "enableTunneling": false,
+            "enableIpConnect": false,
+            "enableShareableLink": false,
+            "enableKerberos": false,
+            "enableSessionRecording": false,
+            "enablePrivateOnlyBastion": true,
+            "ipConfigurations": [
+              {
+                "name": "bastionHostIpConfiguration",
+                "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhosttenant/bastionHostIpConfigurations/bastionHostIpConfiguration",
+                "etag": "w/\\00000000-0000-0000-0000-000000000000\\",
+                "type": "Microsoft.Network/bastionHosts/bastionHostIpConfigurations",
+                "properties": {
+                  "provisioningState": "Succeeded",
+                  "privateIPAllocationMethod": "Dynamic",
+                  "subnet": {
+                    "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/vnet2/subnets/BastionHostSubnet"
+                  }
+                }
+              }
+            ]
+          }
+        }
+      }
+    }
+  }
diff --git a/...esource-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostGetWithZones.json b/...esource-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostGetWithZones.json
@@ -3,13 +3,13 @@
     "api-version": "2024-05-01",
     "subscriptionId": "subid",
     "resourceGroupName": "rg1",
-    "bastionHostName": "bastionhosttenant'"
+    "bastionHostName": "bastionhosttenant"
   },
   "responses": {
     "200": {
       "body": {
-        "name": "bastionhost'",
-        "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhosttenant'",
+        "name": "bastionhosttenant",
+        "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhosttenant",
         "type": "Microsoft.Network/bastionHosts",
         "etag": "w/\\00000000-0000-0000-0000-000000000000\\",
         "location": "West US",
@@ -33,6 +33,7 @@
           "enableShareableLink": false,
           "enableKerberos": false,
           "enableSessionRecording": false,
+          "enablePrivateOnlyBastion": false,
           "ipConfigurations": [
             {
               "name": "bastionHostIpConfiguration",

diff --git a/...-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostListByResourceGroup.json b/...-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostListByResourceGroup.json
@@ -28,6 +28,7 @@
               "enableShareableLink": false,
               "enableKerberos": false,
               "enableSessionRecording": false,
+              "enablePrivateOnlyBastion": false,
               "ipConfigurations": [
                 {
                   "name": "bastionHostIpConfiguration",
@@ -68,6 +69,7 @@
               "enableShareableLink": false,
               "enableKerberos": false,
               "enableSessionRecording": true,
+              "enablePrivateOnlyBastion": false,
               "ipConfigurations": [
                 {
                   "name": "bastionHostIpConfiguration",
@@ -87,6 +89,44 @@
                 }
               ]
             }
+          },
+          {
+            "name": "bastionhost3",
+            "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhost3",
+            "type": "Microsoft.Network/bastionHosts",
+            "etag": "w/\\00000000-0000-0000-0000-000000000000\\",
+            "location": "West US",
+            "sku": {
+              "name": "Premium"
+            },
+            "zones": [],
+            "properties": {
+              "provisioningState": "Succeeded",
+              "dnsName": "bst-9d89d361-100e-4c01-b92d-466548c476dc.bastion.azure.com",
+              "scaleUnits": 2,
+              "disableCopyPaste": false,
+              "enableTunneling": false,
+              "enableIpConnect": false,
+              "enableShareableLink": false,
+              "enableKerberos": false,
+              "enableSessionRecording": false,
+              "enablePrivateOnlyBastion": true,
+              "ipConfigurations": [
+                {
+                  "name": "bastionHostIpConfiguration",
+                  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhost3/bastionHostIpConfigurations/IpConf",
+                  "etag": "w/\\00000000-0000-0000-0000-000000000000\\",
+                  "type": "Microsoft.Network/bastionHosts/bastionHostIpConfigurations",
+                  "properties": {
+                    "provisioningState": "Succeeded",
+                    "privateIPAllocationMethod": "Dynamic",
+                    "subnet": {
+                      "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/vnet3/subnets/AzureBastionSubnet"
+                    }
+                  }
+                }
+              ]
+            }
           }
         ]
       }

diff --git a/...e-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostListBySubscription.json b/...e-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostListBySubscription.json
@@ -27,6 +27,7 @@
               "enableShareableLink": false,
               "enableKerberos": false,
               "enableSessionRecording": false,
+              "enablePrivateOnlyBastion": false,
               "ipConfigurations": [
                 {
                   "name": "bastionHostIpConfiguration",
@@ -92,6 +93,7 @@
               "enableShareableLink": false,
               "enableKerberos": false,
               "enableSessionRecording": true,
+              "enablePrivateOnlyBastion": false,
               "ipConfigurations": [
                 {
                   "name": "bastionHostIpConfiguration",
@@ -111,6 +113,44 @@
                 }
               ]
             }
+          },
+          {
+            "name": "bastionhost4",
+            "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhost4",
+            "type": "Microsoft.Network/bastionHosts",
+            "etag": "w/\\00000000-0000-0000-0000-000000000000\\",
+            "location": "West US",
+            "sku": {
+              "name": "Premium"
+            },
+            "zones": [],
+            "properties": {
+              "provisioningState": "Succeeded",
+              "dnsName": "bst-9d89d361-100e-4c01-b92d-466548c476dc.bastion.azure.com",
+              "scaleUnits": 2,
+              "disableCopyPaste": false,
+              "enableTunneling": false,
+              "enableIpConnect": false,
+              "enableShareableLink": false,
+              "enableKerberos": false,
+              "enableSessionRecording": false,
+              "enablePrivateOnlyBastion": true,
+              "ipConfigurations": [
+                {
+                  "name": "bastionHostIpConfiguration",
+                  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhost4/bastionHostIpConfigurations/IpConf",
+                  "etag": "w/\\00000000-0000-0000-0000-000000000000\\",
+                  "type": "Microsoft.Network/bastionHosts/bastionHostIpConfigurations",
+                  "properties": {
+                    "provisioningState": "Succeeded",
+                    "privateIPAllocationMethod": "Dynamic",
+                    "subnet": {
+                      "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/vnet4/subnets/AzureBastionSubnet"
+                    }
+                  }
+                }
+              ]
+            }
           }
         ]
       }

diff --git a/...twork/resource-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostPatch.json b/...twork/resource-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostPatch.json
@@ -20,7 +20,7 @@
     "200": {
       "body": {
         "name": "bastionhosttenant",
-        "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhosttenant'",
+        "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhosttenant",
         "type": "Microsoft.Network/bastionHosts",
         "etag": "w/\\00000000-0000-0000-0000-000000000000\\",
         "location": "West US",
@@ -38,6 +38,7 @@
           "enableShareableLink": false,
           "enableKerberos": false,
           "enableSessionRecording": false,
+          "enablePrivateOnlyBastion": false,
           "ipConfigurations": [
             {
               "name": "bastionHostIpConfiguration",

diff --git a/...network/resource-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostPut.json b/...network/resource-manager/Microsoft.Network/stable/2024-05-01/examples/BastionHostPut.json
@@ -47,6 +47,7 @@
           "enableShareableLink": false,
           "enableKerberos": false,
           "enableSessionRecording": false,
+          "enablePrivateOnlyBastion": false,
           "ipConfigurations": [
             {
               "name": "bastionHostIpConfiguration",
@@ -70,8 +71,8 @@
     },
     "201": {
       "body": {
-        "name": "bastionhost'",
-        "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhosttenant'",
+        "name": "bastionhosttenant'",
+        "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/bastionHosts/bastionhosttenant",
         "type": "Microsoft.Network/bastionHosts",
         "etag": "w/\\00000000-0000-0000-0000-000000000000\\",
         "location": "West US",
@@ -88,6 +89,7 @@
           "enableShareableLink": false,
           "enableKerberos": false,
           "enableSessionRecording": false,
+          "enablePrivateOnlyBastion": false,
           "ipConfigurations": [
             {
               "name": "bastionHostIpConfiguration",