Enable "Allow public access from any Azure service within Azure to this server"

[Stadly]

Hello!

• Vote on this issue by adding a 👍 reaction
• If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

I need to check the outlined checkmark in the Network section for Azure Database for PostgreSQL flexible servers using Pulumi. It doesn't seem to currently be possible.

[Stadly]

Maybe related: #2860

[thomas11]

Hi @Stadly, thank you for your report. It looks like "public access from any Azure service" depends on "Allow public access" (the checkbox above it)? If so, this issue depends on the linked #2860.

I pinged the upstream issue again. If Azure doesn't fix it, we might be able to work around it by adding an exception to the provider, but that's tricky. Sorry but we need to depend on the Azure API specification here.

[mikhailshilkov]

@Stadly The Azure docs say

Programmatically manage firewall rules: A firewall rule setting with a starting and ending address equal to 0.0.0.0 does the equivalent of the Allow public access from any Azure service within Azure to this server option in the portal. If firewall rules reject the connection attempt, the app won't reach the Azure Database for PostgreSQL flexible server instance.

It sounds like you should be able to do that with azure-native.dbforpostgresql.FirewallRule. Could you give it a try?

Edit: updated the link to the Native resource.

[mikhailshilkov]

@Stadly Any chance you could take a look at the above suggestion?

[Stadly]

Thanks, @mikhailshilkov. I gave it a go but ran into some unrelated (I think) issues. Hopefully I'll get them resolved soon so I can test it properly.

[Stadly]

I think I have resolved the issue I ran into. Now I'm getting an error status code 400, {"error":{"code":"InvalidParameterValue","message":"Invalid value given for parameter firewallRuleName. Specify a valid parameter value."}}. Does anyone know what are the constraints for the name?

[Stadly]

It worked! Thanks :D