AKS regulated - hubs fixes (#49)

mspnp · Nov 30, 2021 · 636b223 · 636b223
1 parent 060919e
commit 636b223
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 27 deletions.
diff --git a/networking/hub-region.v0.json b/networking/hub-region.v0.json
@@ -600,15 +600,7 @@
                         "workspaceId": "[resourceId('Microsoft.OperationalInsights/workspaces', variables('hubLaName'))]",
                         "logs": [
                             {
-                                "category": "AzureFirewallApplicationRule",
-                                "enabled": true
-                            },
-                            {
-                                "category": "AzureFirewallNetworkRule",
-                                "enabled": true
-                            },
-                            {
-                                "category": "AzureFirewallDnsProxy",
+                                "categoryGroup": "allLogs",
                                 "enabled": true
                             }
                         ],

diff --git a/networking/hub-region.v1.json b/networking/hub-region.v1.json
@@ -729,6 +729,7 @@
                                         }
                                     ],
                                     "targetFqdns": [
+                                        "objects.githubusercontent.com",
                                         "storage.googleapis.com",
                                         "api.github.com",
                                         "github-releases.githubusercontent.com",
@@ -823,15 +824,7 @@
                         "workspaceId": "[resourceId('Microsoft.OperationalInsights/workspaces', variables('hubLaName'))]",
                         "logs": [
                             {
-                                "category": "AzureFirewallApplicationRule",
-                                "enabled": true
-                            },
-                            {
-                                "category": "AzureFirewallNetworkRule",
-                                "enabled": true
-                            },
-                            {
-                                "category": "AzureFirewallDnsProxy",
+                                "categoryGroup": "allLogs",
                                 "enabled": true
                             }
                         ],

diff --git a/networking/hub-region.v2.json b/networking/hub-region.v2.json
@@ -864,6 +864,7 @@
                                         }
                                     ],
                                     "targetFqdns": [
+                                        "objects.githubusercontent.com",
                                         "storage.googleapis.com",
                                         "api.github.com",
                                         "github-releases.githubusercontent.com",
@@ -1056,15 +1057,7 @@
                         "workspaceId": "[resourceId('Microsoft.OperationalInsights/workspaces', variables('hubLaName'))]",
                         "logs": [
                             {
-                                "category": "AzureFirewallApplicationRule",
-                                "enabled": true
-                            },
-                            {
-                                "category": "AzureFirewallNetworkRule",
-                                "enabled": true
-                            },
-                            {
-                                "category": "AzureFirewallDnsProxy",
+                                "categoryGroup": "allLogs",
                                 "enabled": true
                             }
                         ],