Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature/66101 app service tls3 #3007

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Feature/66101 app service tls3 #3007

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
381bf54
CLI script to set TLS v1.3 on web apps
GuyHarwood Jan 10, 2025
7663cc0
target a resource group rather than subscription
GuyHarwood Jan 13, 2025
41d8300
scripts for functions and app service to set HTTP config
GuyHarwood Jan 14, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50 changes: 50 additions & 0 deletions deploy/app-service/app-service-set-tls-v1.3.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,50 @@
#!/bin/bash
set -e

# Check if resource group parameter is provided
if [ $# -eq 0 ]; then
echo "Error: Resource group name is required"
echo "Usage: $0 <resource-group-name>"
exit 1
fi

RESOURCE_GROUP=$1

# Verify resource group exists
if ! az group show --name "$RESOURCE_GROUP" &>/dev/null; then
echo "Error: Resource group '$RESOURCE_GROUP' not found"
exit 1
fi

# Get all App Services in the specified resource group
echo "Retrieving App Services in resource group: $RESOURCE_GROUP..."
app_services=$(az webapp list --resource-group "$RESOURCE_GROUP" --query "[].{name:name,resourceGroup:resourceGroup}" -o json)

if [ "$(echo $app_services | jq '. | length')" -eq 0 ]; then
echo "No App Services found in resource group: $RESOURCE_GROUP"
exit 0
fi

# Parse the JSON output and configure TLS for each app service
echo $app_services | jq -c '.[]' | while read -r app; do
name=$(echo $app | jq -r '.name')

echo "Configuring TLS 1.3 for App Service: $name"

# Configure minimum TLS version to 1.3
az webapp config set \
--name $name \
--resource-group $RESOURCE_GROUP \
--min-tls-version 1.3

# Disable older TLS/SSL protocols
az webapp config set \
--name $name \
--resource-group $RESOURCE_GROUP \
--ftps-state Disabled \
--http20-enabled true

echo "Completed TLS configuration for $name"
done

echo "Configuration complete for all App Services in resource group: $RESOURCE_GROUP"
50 changes: 50 additions & 0 deletions deploy/functions/functions-set-tls-v1.3.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,50 @@
#!/bin/bash
set -e

# Check if resource group parameter is provided
if [ $# -eq 0 ]; then
echo "Error: Resource group name is required"
echo "Usage: $0 <resource-group-name>"
exit 1
fi

RESOURCE_GROUP=$1

# Verify resource group exists
if ! az group show --name "$RESOURCE_GROUP" &>/dev/null; then
echo "Error: Resource group '$RESOURCE_GROUP' not found"
exit 1
fi

# Get all Functions in the specified resource group
echo "Retrieving Functions in resource group: $RESOURCE_GROUP..."
app_services=$(az functionapp list --resource-group "$RESOURCE_GROUP" --query "[].{name:name,resourceGroup:resourceGroup}" -o json)

if [ "$(echo $app_services | jq '. | length')" -eq 0 ]; then
echo "No Functions found in resource group: $RESOURCE_GROUP"
exit 0
fi

# Parse the JSON output and configure TLS for each function
echo $app_services | jq -c '.[]' | while read -r app; do
name=$(echo $app | jq -r '.name')

echo "Configuring TLS 1.3 for Function: $name"

# Configure minimum TLS version to 1.3
az functionapp config set \
--name $name \
--resource-group $RESOURCE_GROUP \
--min-tls-version 1.3

# Disable older TLS/SSL protocols
az functionapp config set \
--name $name \
--resource-group $RESOURCE_GROUP \
--ftps-state Disabled \
--http20-enabled true

echo "Completed TLS configuration for $name"
done

echo "Configuration complete for all Functions in resource group: $RESOURCE_GROUP"
Loading