Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

azurerm_spring_cloud_gateway_route_config - support for the protocol property #19382

Conversation

ms-henglu
Copy link
Contributor

@ms-henglu ms-henglu commented Nov 22, 2022

image

@ms-henglu ms-henglu changed the title azurerm_spring_cloud_gateway_route_config - protocol azurerm_spring_cloud_gateway_route_config - support for the protocol property Nov 22, 2022
Copy link
Contributor

@tombuildsstuff tombuildsstuff left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hi @ms-henglu

Thanks for this PR - I've taken a look through and whilst this PR looks good on the whole I think we need to think about the default value here, using HTTP as a default rather than HTTPS (or making this field Required, or not having a default value) is an insecure default -as such we probably need to change this default value.

Thanks!

"protocol": {
Type: pluginsdk.TypeString,
Optional: true,
Default: string(appplatform.GatewayRouteConfigProtocolHTTP),
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is an insecure default, what's the reasoning for making this HTTP rather than HTTPS (or Required?)

Copy link
Contributor Author

@ms-henglu ms-henglu Nov 25, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The server-side's default value is HTTP, if we make it default to HTTPS or required field. It will introduce breaking change.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we make this field Required for 4.0 then and also add a note in the docs warning users that this is insecure by default.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @stephybun , I've updated the PR, please take another look.

Copy link
Member

@stephybun stephybun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @ms-henglu LGTM 🎺

@stephybun stephybun merged commit e16c79d into hashicorp:main Nov 30, 2022
@github-actions github-actions bot added this to the v3.34.0 milestone Nov 30, 2022
stephybun added a commit that referenced this pull request Nov 30, 2022
@github-actions
Copy link

github-actions bot commented Dec 2, 2022

This functionality has been released in v3.34.0 of the Terraform Provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you!

@github-actions
Copy link

github-actions bot commented Jan 2, 2023

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active contributions.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jan 2, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants