feat: Provide support for Azure Firewall

[locmai]

When implementing a new scraper; these tasks are completed:

• Implement configuration
• Implement validation
• Implement scraping
• Implement resource discovery
• Provide unit tests
• Test end-to-end
• Document scraper (docs: add Azure Firewall scrape promitor/docs#64)
• Add entry to changelog (see https://github.com/tomkerkhove/promitor/blob/master/CONTRIBUTING.md#changelog)

Metrics output:

azure_firewall_application_rule_hits{tenant_id="<redacted>",subscription_id="<redacted>",status="unknown",resource_uri="subscriptions/<redacted>/resourceGroups/<redacted>-vnet/providers/Microsoft.Network/azureFirewalls/<redacted>-firewall",resource_group="<redacted>-vnet",instance_name="<redacted>-firewall"} NaN 1726675946568
azure_firewall_application_rule_hits{tenant_id="<redacted>",subscription_id="<redacted>b",status="Allow",resource_uri="subscriptions/<redacted>/resourceGroups/<redacted>-vnet/providers/Microsoft.Network/azureFirewalls/<redacted>-firewall",resource_group="<redacted>-vnet",instance_name="<redacted>-firewall"} 84 1726675946630
azure_firewall_application_rule_hits{tenant_id="<redacted>",subscription_id="<redacted>",status="Deny",resource_uri="subscriptions/<redacted>/resourceGroups/<redacted>-vnet/providers/Microsoft.Network/azureFirewalls/<redacted>-firewall",resource_group="<redacted>vnet",instance_name="<redacted>-firewall"} 204 1726675946627

Discovery output:

/api/v1/health

{"entries":{"azure-resource-graph":{"data":{"Subscription <redacted>":{"isSuccessful":true,"message":"Successfully queried resources via Azure Resource Graph"}},"description":"Successfully queried all subscriptions","duration":"00:00:00.1368361","status":"Healthy","tags":[]}},"status":"Healthy","totalDuration":"00:00:00.1413060"}

/api/v2/resources/groups/azure-firewall-landscape/discover

{"$type":"Promitor.Core.Contracts.PagedPayload`1[[Promitor.Core.Contracts.AzureResourceDefinition, Promitor.Core.Contracts]], Promitor.Core.Contracts","Result":[{"$type":"Promitor.Core.Contracts.ResourceTypes.AzureFirewallResourceDefinition, Promitor.Core.Contracts","AzureFirewallName":"<redacted>-vnet-firewall","ResourceType":"AzureFirewall","SubscriptionId":"<redacted>","ResourceGroupName":"<redacted>","ResourceName":"<redacted>-vnet-firewall","UniqueName":"<redacted>-vnet-firewall"},{"$type":"Promitor.Core.Contracts.ResourceTypes.AzureFirewallResourceDefinition, Promitor.Core.Contracts","AzureFirewallName":"<redacted>-firewall","ResourceType":"AzureFirewall","SubscriptionId":"<redacted>","ResourceGroupName":"<redacted>-validation","ResourceName":"<redacted>-validation-firewall","UniqueName":"<redacted>-validation-firewall"},{"$type":"Promitor.Core.Contracts.ResourceTypes.AzureFirewallResourceDefinition, Promitor.Core.Contracts","AzureFirewallName":"<redacted>-firewall","ResourceType":"AzureFirewall","SubscriptionId":"<redacted>","ResourceGroupName":"<redacted>-vnet","ResourceName":"<redacted>-firewall","UniqueName":"<redacted>-firewall"},{"$type":"Promitor.Core.Contracts.ResourceTypes.AzureFirewallResourceDefinition, Promitor.Core.Contracts","AzureFirewallName":"<redacted>-firewall","ResourceType":"AzureFirewall","SubscriptionId":"<redacted>","ResourceGroupName":"<redacted>-vnet","ResourceName":"<redacted>-firewall","UniqueName":"<redacted>-firewall"},{"$type":"Promitor.Core.Contracts.ResourceTypes.AzureFirewallResourceDefinition, Promitor.Core.Contracts","AzureFirewallName":"<redacted>-firewall","ResourceType":"AzureFirewall","SubscriptionId":"<redacted>","ResourceGroupName":"<redacted>-vnet","ResourceName":"<redacted>-firewall","UniqueName":"<redacted>-vnet-firewall"}],"PageInformation":{"$type":"Promitor.Core.Contracts.PageInformation, Promitor.Core.Contracts","PageSize":1000,"CurrentPage":1,"TotalRecords":5},"HasMore":false}

[github-actions]

Thank you for your contribution! 🙏 We will review it as soon as possible.

[tomkerkhove]

Thanks a ton!

[tomkerkhove]

/azp run "Promitor CI - Resource Discovery Agent"

[tomkerkhove]

/azp run "Promitor CI - Scraper Agent"

[azure-pipelines]

No pipelines are associated with this pull request.

[azure-pipelines]

No pipelines are associated with this pull request.