Use Azure Bastion tunneling in place of VM Bastion

[anniehedgpeth]

What problem would you like to address?

After this pull request was created that added an option for tunneling, we should use this feature in our tests wherever possible. This may end up negating the need for VM bastions entirely in all of our Active/Active test scenarios.

Who is the audience for this request?

TFE team

What would the ideal solution look like?

The tunneling feature would be used for all SSHing in our tests in place of the use of a bastion (like here).

What alternatives have you considered?

The alternative is to leave it as is, but the test infrastructure provisioning will likely be faster if/when we use this.

How does this impact you?

It doesn't. I just like efficiency. 😄

Are there any deadlines?

Nope.

Is there any additional context?

Please be sure to document the best way to access the TFE instance after this is implemented.

[anniehedgpeth]

az network bastion ssh --name "hcqj-bastion-host" --resource-group "hcqj-rg" --auth-type "ssh-key" --username "tfeuser" --ssh-key "./work/private-key.pem" --target-resource-id "/subscriptions/1234SubscriptionID/resourceGroups/hcqj-rg/providers/Microsoft.Compute/virtualMachineScaleSets/hcqj-vmss/virtualMachines/0"

[anniehedgpeth]

Extensions must be added:

az extension add --name bastion
az extension add --name ssh