From 0cfda0803610e05d6af594eef4f0a5fc67487c45 Mon Sep 17 00:00:00 2001 From: Pankaj Agrawal Date: Mon, 2 Dec 2024 10:17:10 +0100 Subject: [PATCH] chore: set app setting config required for all all 3 service uris (#3721) ## Description Closes #3207 ## Pipeline Reference | Pipeline | | -------- | | [![avm.res.web.site](https://github.com/pankajagrawal16/bicep-registry-modules/actions/workflows/avm.res.web.site.yml/badge.svg?branch=3207%2Fadd-required-properties)](https://github.com/pankajagrawal16/bicep-registry-modules/actions/workflows/avm.res.web.site.yml) | ## Type of Change - [x] Update to CI Environment or utilities (Non-module affecting changes) - [x] Azure Verified Module updates: - [ ] Bugfix containing backwards-compatible bug fixes, and I have NOT bumped the MAJOR or MINOR version in `version.json`: - [ ] Someone has opened a bug report issue, and I have included "Closes #{bug_report_issue_number}" in the PR description. - [ ] The bug was found by the module author, and no one has opened an issue to report it yet. - [x] Feature update backwards compatible feature updates, and I have bumped the MINOR version in `version.json`. - [ ] Breaking changes and I have bumped the MAJOR version in `version.json`. - [ ] Update to documentation ## Checklist - [x] I'm sure there are no other open Pull Requests for the same update/change - [x] I have run `Set-AVMModule` locally to generate the supporting module files. - [x] My corresponding pipelines / checks run clean and green without any errors or warnings --------- Co-authored-by: Buddy <38195643+tsc-buddy@users.noreply.github.com> --- avm/res/web/site/README.md | 22 ++++++- .../main.json | 4 +- .../web/site/config--appsettings/main.bicep | 4 +- .../web/site/config--appsettings/main.json | 6 +- .../web/site/config--authsettingsv2/main.json | 4 +- avm/res/web/site/config--logs/main.json | 4 +- avm/res/web/site/config--web/main.json | 4 +- .../web/site/extensions--msdeploy/main.json | 4 +- .../relay/main.json | 4 +- avm/res/web/site/main.json | 58 +++++++++---------- .../main.json | 4 +- .../site/slot/config--appsettings/main.json | 4 +- .../slot/config--authsettingsv2/main.json | 4 +- .../site/slot/extensions--msdeploy/main.json | 4 +- .../relay/main.json | 4 +- avm/res/web/site/slot/main.json | 24 ++++---- .../main.test.bicep | 2 + .../tests/e2e/waf-aligned/main.test.bicep | 2 + .../main.test.bicep | 2 + avm/res/web/site/version.json | 2 +- 20 files changed, 96 insertions(+), 70 deletions(-) diff --git a/avm/res/web/site/README.md b/avm/res/web/site/README.md index 7e1a4a2b04..0dd5b578a7 100644 --- a/avm/res/web/site/README.md +++ b/avm/res/web/site/README.md @@ -832,7 +832,9 @@ module site 'br/public:avm/res/web/site:' = { value: 'false' } ] + ftpsState: 'FtpsOnly' linuxFxVersion: 'DOCKER|mcr.microsoft.com/appsvc/staticsite:latest' + minTlsVersion: '1.2' } } } @@ -872,7 +874,9 @@ module site 'br/public:avm/res/web/site:' = { "value": "false" } ], - "linuxFxVersion": "DOCKER|mcr.microsoft.com/appsvc/staticsite:latest" + "ftpsState": "FtpsOnly", + "linuxFxVersion": "DOCKER|mcr.microsoft.com/appsvc/staticsite:latest", + "minTlsVersion": "1.2" } } } @@ -902,7 +906,9 @@ param siteConfig = { value: 'false' } ] + ftpsState: 'FtpsOnly' linuxFxVersion: 'DOCKER|mcr.microsoft.com/appsvc/staticsite:latest' + minTlsVersion: '1.2' } ``` @@ -1134,6 +1140,7 @@ module site 'br/public:avm/res/web/site:' = { scmSiteAlsoStopped: true siteConfig: { alwaysOn: true + ftpsState: 'FtpsOnly' healthCheckPath: '/healthz' metadata: [ { @@ -1141,6 +1148,7 @@ module site 'br/public:avm/res/web/site:' = { value: 'dotnetcore' } ] + minTlsVersion: '1.2' } vnetContentShareEnabled: true vnetImagePullEnabled: true @@ -1209,13 +1217,15 @@ module site 'br/public:avm/res/web/site:' = { "siteConfig": { "value": { "alwaysOn": true, + "ftpsState": "FtpsOnly", "healthCheckPath": "/healthz", "metadata": [ { "name": "CURRENT_STACK", "value": "dotnetcore" } - ] + ], + "minTlsVersion": "1.2" } }, "vnetContentShareEnabled": { @@ -1270,6 +1280,7 @@ param publicNetworkAccess = 'Disabled' param scmSiteAlsoStopped = true param siteConfig = { alwaysOn: true + ftpsState: 'FtpsOnly' healthCheckPath: '/healthz' metadata: [ { @@ -1277,6 +1288,7 @@ param siteConfig = { value: 'dotnetcore' } ] + minTlsVersion: '1.2' } param vnetContentShareEnabled = true param vnetImagePullEnabled = true @@ -2930,6 +2942,8 @@ module site 'br/public:avm/res/web/site:' = { value: 'false' } ] + ftpsState: 'FtpsOnly' + minTlsVersion: '1.2' windowsFxVersion: 'DOCKER|mcr.microsoft.com/azure-app-service/windows/parkingpage:latest' } } @@ -2970,6 +2984,8 @@ module site 'br/public:avm/res/web/site:' = { "value": "false" } ], + "ftpsState": "FtpsOnly", + "minTlsVersion": "1.2", "windowsFxVersion": "DOCKER|mcr.microsoft.com/azure-app-service/windows/parkingpage:latest" } } @@ -3000,6 +3016,8 @@ param siteConfig = { value: 'false' } ] + ftpsState: 'FtpsOnly' + minTlsVersion: '1.2' windowsFxVersion: 'DOCKER|mcr.microsoft.com/azure-app-service/windows/parkingpage:latest' } ``` diff --git a/avm/res/web/site/basic-publishing-credentials-policy/main.json b/avm/res/web/site/basic-publishing-credentials-policy/main.json index 2d779d2d14..f0e0edcb37 100644 --- a/avm/res/web/site/basic-publishing-credentials-policy/main.json +++ b/avm/res/web/site/basic-publishing-credentials-policy/main.json @@ -4,8 +4,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "15847824660831257384" + "version": "0.31.92.45157", + "templateHash": "2026976021876048432" }, "name": "Web Site Basic Publishing Credentials Policies", "description": "This module deploys a Web Site Basic Publishing Credentials Policy.", diff --git a/avm/res/web/site/config--appsettings/main.bicep b/avm/res/web/site/config--appsettings/main.bicep index 202a2ac205..61ae537829 100644 --- a/avm/res/web/site/config--appsettings/main.bicep +++ b/avm/res/web/site/config--appsettings/main.bicep @@ -44,7 +44,9 @@ var azureWebJobsValues = !empty(storageAccountResourceId) && !(storageAccountUse : !empty(storageAccountResourceId) && storageAccountUseIdentityAuthentication ? union( { AzureWebJobsStorage__accountName: storageAccount.name }, - { AzureWebJobsStorage__blobServiceUri: storageAccount.properties.primaryEndpoints.blob } + { AzureWebJobsStorage__blobServiceUri: storageAccount.properties.primaryEndpoints.blob }, + { AzureWebJobsStorage__queueServiceUri: storageAccount.properties.primaryEndpoints.queue }, + { AzureWebJobsStorage__tableServiceUri: storageAccount.properties.primaryEndpoints.table } ) : {} diff --git a/avm/res/web/site/config--appsettings/main.json b/avm/res/web/site/config--appsettings/main.json index 0a244e922c..80f1f2e84d 100644 --- a/avm/res/web/site/config--appsettings/main.json +++ b/avm/res/web/site/config--appsettings/main.json @@ -5,8 +5,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "10845600494881775271" + "version": "0.31.92.45157", + "templateHash": "12059034129903056117" }, "name": "Site App Settings", "description": "This module deploys a Site App Setting.", @@ -105,7 +105,7 @@ "apiVersion": "2023-12-01", "name": "[format('{0}/{1}', parameters('appName'), 'appsettings')]", "kind": "[parameters('kind')]", - "properties": "[union(coalesce(parameters('currentAppSettings'), createObject()), coalesce(parameters('appSettingsKeyValuePairs'), createObject()), if(and(not(empty(parameters('storageAccountResourceId'))), not(parameters('storageAccountUseIdentityAuthentication'))), createObject('AzureWebJobsStorage', format('DefaultEndpointsProtocol=https;AccountName={0};AccountKey={1};EndpointSuffix={2}', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/')), listKeys(extensionResourceId(format('/subscriptions/{0}/resourceGroups/{1}', split(coalesce(parameters('storageAccountResourceId'), '//'), '/')[2], split(coalesce(parameters('storageAccountResourceId'), '////'), '/')[4]), 'Microsoft.Storage/storageAccounts', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/'))), '2023-05-01').keys[0].value, environment().suffixes.storage)), if(and(not(empty(parameters('storageAccountResourceId'))), parameters('storageAccountUseIdentityAuthentication')), union(createObject('AzureWebJobsStorage__accountName', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/'))), createObject('AzureWebJobsStorage__blobServiceUri', reference('storageAccount').primaryEndpoints.blob)), createObject())), if(not(empty(parameters('appInsightResourceId'))), createObject('APPLICATIONINSIGHTS_CONNECTION_STRING', reference('appInsight').ConnectionString), createObject()))]", + "properties": "[union(coalesce(parameters('currentAppSettings'), createObject()), coalesce(parameters('appSettingsKeyValuePairs'), createObject()), if(and(not(empty(parameters('storageAccountResourceId'))), not(parameters('storageAccountUseIdentityAuthentication'))), createObject('AzureWebJobsStorage', format('DefaultEndpointsProtocol=https;AccountName={0};AccountKey={1};EndpointSuffix={2}', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/')), listKeys(extensionResourceId(format('/subscriptions/{0}/resourceGroups/{1}', split(coalesce(parameters('storageAccountResourceId'), '//'), '/')[2], split(coalesce(parameters('storageAccountResourceId'), '////'), '/')[4]), 'Microsoft.Storage/storageAccounts', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/'))), '2023-05-01').keys[0].value, environment().suffixes.storage)), if(and(not(empty(parameters('storageAccountResourceId'))), parameters('storageAccountUseIdentityAuthentication')), union(createObject('AzureWebJobsStorage__accountName', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/'))), createObject('AzureWebJobsStorage__blobServiceUri', reference('storageAccount').primaryEndpoints.blob), createObject('AzureWebJobsStorage__queueServiceUri', reference('storageAccount').primaryEndpoints.queue), createObject('AzureWebJobsStorage__tableServiceUri', reference('storageAccount').primaryEndpoints.table)), createObject())), if(not(empty(parameters('appInsightResourceId'))), createObject('APPLICATIONINSIGHTS_CONNECTION_STRING', reference('appInsight').ConnectionString), createObject()))]", "dependsOn": [ "app", "appInsight", diff --git a/avm/res/web/site/config--authsettingsv2/main.json b/avm/res/web/site/config--authsettingsv2/main.json index 34f9f10696..dd392c62c7 100644 --- a/avm/res/web/site/config--authsettingsv2/main.json +++ b/avm/res/web/site/config--authsettingsv2/main.json @@ -4,8 +4,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "7782125422759995841" + "version": "0.31.92.45157", + "templateHash": "8027540450131770630" }, "name": "Site Auth Settings V2 Config", "description": "This module deploys a Site Auth Settings V2 Configuration.", diff --git a/avm/res/web/site/config--logs/main.json b/avm/res/web/site/config--logs/main.json index b22108e5fe..0368a67d10 100644 --- a/avm/res/web/site/config--logs/main.json +++ b/avm/res/web/site/config--logs/main.json @@ -5,8 +5,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "2527104715221107836" + "version": "0.31.92.45157", + "templateHash": "1970611440314801998" }, "name": "Site logs Config", "description": "This module deploys a Site logs Configuration.", diff --git a/avm/res/web/site/config--web/main.json b/avm/res/web/site/config--web/main.json index 75a81a9720..2a7b0ad790 100644 --- a/avm/res/web/site/config--web/main.json +++ b/avm/res/web/site/config--web/main.json @@ -5,8 +5,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "18186736059685095806" + "version": "0.31.92.45157", + "templateHash": "1157890849044188513" }, "name": "Site Api Management Config", "description": "This module deploys a Site Api Management Configuration.", diff --git a/avm/res/web/site/extensions--msdeploy/main.json b/avm/res/web/site/extensions--msdeploy/main.json index 069239c100..042bd8a033 100644 --- a/avm/res/web/site/extensions--msdeploy/main.json +++ b/avm/res/web/site/extensions--msdeploy/main.json @@ -5,8 +5,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "10249716032875912201" + "version": "0.31.92.45157", + "templateHash": "3414152511831931415" }, "name": "Site Deployment Extension ", "description": "This module deploys a Site extension for MSDeploy.", diff --git a/avm/res/web/site/hybrid-connection-namespace/relay/main.json b/avm/res/web/site/hybrid-connection-namespace/relay/main.json index bac0f9d832..1ef244df6a 100644 --- a/avm/res/web/site/hybrid-connection-namespace/relay/main.json +++ b/avm/res/web/site/hybrid-connection-namespace/relay/main.json @@ -4,8 +4,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "9545759447796150909" + "version": "0.31.92.45157", + "templateHash": "10816364199058461544" }, "name": "Web/Function Apps Hybrid Connection Relay", "description": "This module deploys a Site Hybrid Connection Namespace Relay.", diff --git a/avm/res/web/site/main.json b/avm/res/web/site/main.json index 3df6f5d784..364452a583 100644 --- a/avm/res/web/site/main.json +++ b/avm/res/web/site/main.json @@ -5,8 +5,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "15895523310817597793" + "version": "0.31.92.45157", + "templateHash": "17601733743008311306" }, "name": "Web/Function Apps", "description": "This module deploys a Web or Function App.", @@ -1018,8 +1018,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "10845600494881775271" + "version": "0.31.92.45157", + "templateHash": "12059034129903056117" }, "name": "Site App Settings", "description": "This module deploys a Site App Setting.", @@ -1118,7 +1118,7 @@ "apiVersion": "2023-12-01", "name": "[format('{0}/{1}', parameters('appName'), 'appsettings')]", "kind": "[parameters('kind')]", - "properties": "[union(coalesce(parameters('currentAppSettings'), createObject()), coalesce(parameters('appSettingsKeyValuePairs'), createObject()), if(and(not(empty(parameters('storageAccountResourceId'))), not(parameters('storageAccountUseIdentityAuthentication'))), createObject('AzureWebJobsStorage', format('DefaultEndpointsProtocol=https;AccountName={0};AccountKey={1};EndpointSuffix={2}', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/')), listKeys(extensionResourceId(format('/subscriptions/{0}/resourceGroups/{1}', split(coalesce(parameters('storageAccountResourceId'), '//'), '/')[2], split(coalesce(parameters('storageAccountResourceId'), '////'), '/')[4]), 'Microsoft.Storage/storageAccounts', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/'))), '2023-05-01').keys[0].value, environment().suffixes.storage)), if(and(not(empty(parameters('storageAccountResourceId'))), parameters('storageAccountUseIdentityAuthentication')), union(createObject('AzureWebJobsStorage__accountName', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/'))), createObject('AzureWebJobsStorage__blobServiceUri', reference('storageAccount').primaryEndpoints.blob)), createObject())), if(not(empty(parameters('appInsightResourceId'))), createObject('APPLICATIONINSIGHTS_CONNECTION_STRING', reference('appInsight').ConnectionString), createObject()))]", + "properties": "[union(coalesce(parameters('currentAppSettings'), createObject()), coalesce(parameters('appSettingsKeyValuePairs'), createObject()), if(and(not(empty(parameters('storageAccountResourceId'))), not(parameters('storageAccountUseIdentityAuthentication'))), createObject('AzureWebJobsStorage', format('DefaultEndpointsProtocol=https;AccountName={0};AccountKey={1};EndpointSuffix={2}', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/')), listKeys(extensionResourceId(format('/subscriptions/{0}/resourceGroups/{1}', split(coalesce(parameters('storageAccountResourceId'), '//'), '/')[2], split(coalesce(parameters('storageAccountResourceId'), '////'), '/')[4]), 'Microsoft.Storage/storageAccounts', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/'))), '2023-05-01').keys[0].value, environment().suffixes.storage)), if(and(not(empty(parameters('storageAccountResourceId'))), parameters('storageAccountUseIdentityAuthentication')), union(createObject('AzureWebJobsStorage__accountName', last(split(coalesce(parameters('storageAccountResourceId'), 'dummyName'), '/'))), createObject('AzureWebJobsStorage__blobServiceUri', reference('storageAccount').primaryEndpoints.blob), createObject('AzureWebJobsStorage__queueServiceUri', reference('storageAccount').primaryEndpoints.queue), createObject('AzureWebJobsStorage__tableServiceUri', reference('storageAccount').primaryEndpoints.table)), createObject())), if(not(empty(parameters('appInsightResourceId'))), createObject('APPLICATIONINSIGHTS_CONNECTION_STRING', reference('appInsight').ConnectionString), createObject()))]", "dependsOn": [ "app", "appInsight", @@ -1182,8 +1182,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "7782125422759995841" + "version": "0.31.92.45157", + "templateHash": "8027540450131770630" }, "name": "Site Auth Settings V2 Config", "description": "This module deploys a Site Auth Settings V2 Configuration.", @@ -1286,8 +1286,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "2527104715221107836" + "version": "0.31.92.45157", + "templateHash": "1970611440314801998" }, "name": "Site logs Config", "description": "This module deploys a Site logs Configuration.", @@ -1381,8 +1381,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "18186736059685095806" + "version": "0.31.92.45157", + "templateHash": "1157890849044188513" }, "name": "Site Api Management Config", "description": "This module deploys a Site Api Management Configuration.", @@ -1475,8 +1475,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "10249716032875912201" + "version": "0.31.92.45157", + "templateHash": "3414152511831931415" }, "name": "Site Deployment Extension ", "description": "This module deploys a Site extension for MSDeploy.", @@ -1697,8 +1697,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "2418467213841620758" + "version": "0.31.92.45157", + "templateHash": "4039289806405873433" }, "name": "Web/Function App Deployment Slots", "description": "This module deploys a Web or Function App Deployment Slot.", @@ -2678,8 +2678,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "3011151783207983935" + "version": "0.31.92.45157", + "templateHash": "13277907644137249086" }, "name": "Site Slot App Settings", "description": "This module deploys a Site Slot App Setting.", @@ -2861,8 +2861,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "7842363652527859767" + "version": "0.31.92.45157", + "templateHash": "4125449038326941856" }, "name": "Site Slot Auth Settings V2 Config", "description": "This module deploys a Site Auth Settings V2 Configuration.", @@ -2983,8 +2983,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "1564349757337430633" + "version": "0.31.92.45157", + "templateHash": "7770417760937550862" }, "name": "Web Site Slot Basic Publishing Credentials Policies", "description": "This module deploys a Web Site Slot Basic Publishing Credentials Policy.", @@ -3109,8 +3109,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "12569198723769767672" + "version": "0.31.92.45157", + "templateHash": "8841665571877490324" }, "name": "Web/Function Apps Slot Hybrid Connection Relay", "description": "This module deploys a Site Slot Hybrid Connection Namespace Relay.", @@ -3215,8 +3215,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "10249716032875912201" + "version": "0.31.92.45157", + "templateHash": "3414152511831931415" }, "name": "Site Deployment Extension ", "description": "This module deploys a Site extension for MSDeploy.", @@ -4144,8 +4144,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "15847824660831257384" + "version": "0.31.92.45157", + "templateHash": "2026976021876048432" }, "name": "Web Site Basic Publishing Credentials Policies", "description": "This module deploys a Web Site Basic Publishing Credentials Policy.", @@ -4260,8 +4260,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "9545759447796150909" + "version": "0.31.92.45157", + "templateHash": "10816364199058461544" }, "name": "Web/Function Apps Hybrid Connection Relay", "description": "This module deploys a Site Hybrid Connection Namespace Relay.", diff --git a/avm/res/web/site/slot/basic-publishing-credentials-policy/main.json b/avm/res/web/site/slot/basic-publishing-credentials-policy/main.json index d18f65520b..0d47c673fa 100644 --- a/avm/res/web/site/slot/basic-publishing-credentials-policy/main.json +++ b/avm/res/web/site/slot/basic-publishing-credentials-policy/main.json @@ -4,8 +4,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "1564349757337430633" + "version": "0.31.92.45157", + "templateHash": "7770417760937550862" }, "name": "Web Site Slot Basic Publishing Credentials Policies", "description": "This module deploys a Web Site Slot Basic Publishing Credentials Policy.", diff --git a/avm/res/web/site/slot/config--appsettings/main.json b/avm/res/web/site/slot/config--appsettings/main.json index e3b453acd4..57c21132b4 100644 --- a/avm/res/web/site/slot/config--appsettings/main.json +++ b/avm/res/web/site/slot/config--appsettings/main.json @@ -5,8 +5,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "3011151783207983935" + "version": "0.31.92.45157", + "templateHash": "13277907644137249086" }, "name": "Site Slot App Settings", "description": "This module deploys a Site Slot App Setting.", diff --git a/avm/res/web/site/slot/config--authsettingsv2/main.json b/avm/res/web/site/slot/config--authsettingsv2/main.json index c68af5ca88..8009b43b55 100644 --- a/avm/res/web/site/slot/config--authsettingsv2/main.json +++ b/avm/res/web/site/slot/config--authsettingsv2/main.json @@ -4,8 +4,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "7842363652527859767" + "version": "0.31.92.45157", + "templateHash": "4125449038326941856" }, "name": "Site Slot Auth Settings V2 Config", "description": "This module deploys a Site Auth Settings V2 Configuration.", diff --git a/avm/res/web/site/slot/extensions--msdeploy/main.json b/avm/res/web/site/slot/extensions--msdeploy/main.json index 069239c100..042bd8a033 100644 --- a/avm/res/web/site/slot/extensions--msdeploy/main.json +++ b/avm/res/web/site/slot/extensions--msdeploy/main.json @@ -5,8 +5,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "10249716032875912201" + "version": "0.31.92.45157", + "templateHash": "3414152511831931415" }, "name": "Site Deployment Extension ", "description": "This module deploys a Site extension for MSDeploy.", diff --git a/avm/res/web/site/slot/hybrid-connection-namespace/relay/main.json b/avm/res/web/site/slot/hybrid-connection-namespace/relay/main.json index accf1b996d..f95687fa81 100644 --- a/avm/res/web/site/slot/hybrid-connection-namespace/relay/main.json +++ b/avm/res/web/site/slot/hybrid-connection-namespace/relay/main.json @@ -4,8 +4,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "12569198723769767672" + "version": "0.31.92.45157", + "templateHash": "8841665571877490324" }, "name": "Web/Function Apps Slot Hybrid Connection Relay", "description": "This module deploys a Site Slot Hybrid Connection Namespace Relay.", diff --git a/avm/res/web/site/slot/main.json b/avm/res/web/site/slot/main.json index 2607658182..13726945cb 100644 --- a/avm/res/web/site/slot/main.json +++ b/avm/res/web/site/slot/main.json @@ -5,8 +5,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "2418467213841620758" + "version": "0.31.92.45157", + "templateHash": "4039289806405873433" }, "name": "Web/Function App Deployment Slots", "description": "This module deploys a Web or Function App Deployment Slot.", @@ -986,8 +986,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "3011151783207983935" + "version": "0.31.92.45157", + "templateHash": "13277907644137249086" }, "name": "Site Slot App Settings", "description": "This module deploys a Site Slot App Setting.", @@ -1169,8 +1169,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "7842363652527859767" + "version": "0.31.92.45157", + "templateHash": "4125449038326941856" }, "name": "Site Slot Auth Settings V2 Config", "description": "This module deploys a Site Auth Settings V2 Configuration.", @@ -1291,8 +1291,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "1564349757337430633" + "version": "0.31.92.45157", + "templateHash": "7770417760937550862" }, "name": "Web Site Slot Basic Publishing Credentials Policies", "description": "This module deploys a Web Site Slot Basic Publishing Credentials Policy.", @@ -1417,8 +1417,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "12569198723769767672" + "version": "0.31.92.45157", + "templateHash": "8841665571877490324" }, "name": "Web/Function Apps Slot Hybrid Connection Relay", "description": "This module deploys a Site Slot Hybrid Connection Namespace Relay.", @@ -1523,8 +1523,8 @@ "metadata": { "_generator": { "name": "bicep", - "version": "0.30.23.60470", - "templateHash": "10249716032875912201" + "version": "0.31.92.45157", + "templateHash": "3414152511831931415" }, "name": "Site Deployment Extension ", "description": "This module deploys a Site extension for MSDeploy.", diff --git a/avm/res/web/site/tests/e2e/linuxContainerWebApp.defaults/main.test.bicep b/avm/res/web/site/tests/e2e/linuxContainerWebApp.defaults/main.test.bicep index f2873a8031..0e6ef1c90a 100644 --- a/avm/res/web/site/tests/e2e/linuxContainerWebApp.defaults/main.test.bicep +++ b/avm/res/web/site/tests/e2e/linuxContainerWebApp.defaults/main.test.bicep @@ -55,6 +55,8 @@ module testDeployment '../../../main.bicep' = [ kind: 'app,linux,container' serverFarmResourceId: nestedDependencies.outputs.serverFarmResourceId siteConfig: { + minTlsVersion: '1.2' + ftpsState: 'FtpsOnly' appSettings: [ { name: 'WEBSITES_ENABLE_APP_SERVICE_STORAGE' diff --git a/avm/res/web/site/tests/e2e/waf-aligned/main.test.bicep b/avm/res/web/site/tests/e2e/waf-aligned/main.test.bicep index cce9097635..1743371503 100644 --- a/avm/res/web/site/tests/e2e/waf-aligned/main.test.bicep +++ b/avm/res/web/site/tests/e2e/waf-aligned/main.test.bicep @@ -79,6 +79,8 @@ module testDeployment '../../../main.bicep' = [ siteConfig: { healthCheckPath: '/healthz' alwaysOn: true + minTlsVersion: '1.2' + ftpsState: 'FtpsOnly' metadata: [ { name: 'CURRENT_STACK' diff --git a/avm/res/web/site/tests/e2e/winContainerWebApp.defaults/main.test.bicep b/avm/res/web/site/tests/e2e/winContainerWebApp.defaults/main.test.bicep index a8c28d68c1..9ec4933624 100644 --- a/avm/res/web/site/tests/e2e/winContainerWebApp.defaults/main.test.bicep +++ b/avm/res/web/site/tests/e2e/winContainerWebApp.defaults/main.test.bicep @@ -55,6 +55,8 @@ module testDeployment '../../../main.bicep' = [ kind: 'app,container,windows' serverFarmResourceId: nestedDependencies.outputs.serverFarmResourceId siteConfig: { + minTlsVersion: '1.2' + ftpsState: 'FtpsOnly' appSettings: [ { name: 'WEBSITES_ENABLE_APP_SERVICE_STORAGE' diff --git a/avm/res/web/site/version.json b/avm/res/web/site/version.json index 25beee1c2f..5ab55325df 100644 --- a/avm/res/web/site/version.json +++ b/avm/res/web/site/version.json @@ -1,6 +1,6 @@ { "$schema": "https://aka.ms/bicep-registry-module-version-file-schema#", - "version": "0.11", + "version": "0.12", "pathFilters": [ "./main.json" ]