Skip to content

AddRedis().WithDataVolume() generates storage account without minimum TLS 1.2 configuration #11868

@vhvb1989

Description

@vhvb1989

Description

When using AddRedis().WithDataVolume(), the generated Azure Storage Account definition is missing the minimumTlsVersion: 'TLS1_2' property. This can trigger Azure security alerts and doesn't follow Azure security best practices.

Steps to Reproduce

  1. Use the following code in an Aspire AppHost:

    var redis = builder.AddRedis("cache")
        .WithLifetime(ContainerLifetime.Persistent)
        .WithDataVolume();
  2. Publish the application to generate Bicep templates

  3. Examine the generated storage account resource definition

Expected Behavior

The generated storage account should include minimumTlsVersion: 'TLS1_2' to enforce secure connections and comply with Azure security best practices.

Actual Behavior

The storage account is generated without the minimumTlsVersion property, defaulting to potentially insecure TLS versions.

Environment

  • Reproduction Location: playground/AzureContainerApps/AzureContainerApps.AppHost/Program.cs

Impact

  • Triggers Azure security alerts
  • Does not follow Azure security best practices
  • Potential security compliance issues

Metadata

Metadata

Assignees

Labels

area-integrationsIssues pertaining to Aspire Integrations packages

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions