azurerm_sql_firewall_rule: TLS minimal version support for AzureSQL server

[Quantalian]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

AzureRM Provider Version

• 2.4.0

Description

After Azure latest update for App Registration 'TLS minimal version' is required in Azure SQL server firewall rules if you are using Msal.js <= 1.0 for Single Page Application.

Expected behavior

ssl_minimal_tls_version = "TLS1_2"

Actual behavior

not supported, need to define it from portal after terraform apply

New or Affected Resource(s)

• azurerm_sql_firewall_rule

References

• https://azure.microsoft.com/en-au/updates/in-development-build-single-page-application-with-msal-js/

[ghost]

This has been released in version 2.31.0 of the provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. As an example:

provider "azurerm" {
    version = "~> 2.31.0"
}
# ... other configuration ...

[HarleyB123]

Hey 👋

Whilst this has been solved for azurerm_mssql_server, it would be really cool if this same sort of implementation was available for azurerm_sql_server

Will try and make a PR for this myself, though my Go is sketchy and would be copying the great work already done in the mssql PR :)

[dhirschfeld]

Hi @HarleyB123 👋
Just wondering why you wouldn't simply port to azurerm_mssql_server since they spin up the same infrastructure?

Even though it's not apparently documented anywhere, from my inquiry azurerm_sql_server is effectively a deprecated api which has been superseded by azurerm_mssql_server: #8338 (comment)

[HarleyB123]

Thanks @dhirschfeld , I agree that documentation would be beneficial on this as I thought they were two separate resources too! :)

Will port over to azurerm_mssql_server

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 [email protected]. Thanks!