Update TLS to the latest version for core web apps / function apps

microsoft · Feb 13, 2025 · fd11d09 · fd11d09
1 parent 2073749
commit fd11d09
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -13,6 +13,7 @@ ENHANCEMENTS:
 * Azure Cosmos DB should disable public network access ([#4322](https://github.com/microsoft/AzureTRE/issues/4322))
 * Add bundle target to Makefile for handling different bundle types in single command ([#4372](https://github.com/microsoft/AzureTRE/issues/4372))
 * Add Windows image field to the Admin VM template ([#4274](https://github.com/microsoft/AzureTRE/pull/4274))
+* Update TLS to the latest version for core web apps / function apps (([#4351](https://github.com/microsoft/AzureTRE/issues/4351))
 
 BUG FIXES:
 * Fix upgrade when porter install has failed ([#4338](https://github.com/microsoft/AzureTRE/pull/4338))

diff --git a/core/terraform/airlock/airlock_processor.tf b/core/terraform/airlock/airlock_processor.tf
@@ -111,6 +111,7 @@ resource "azurerm_linux_function_app" "airlock_function_app" {
     container_registry_use_managed_identity       = true
     vnet_route_all_enabled                        = true
     ftps_state                                    = "Disabled"
+    minimum_tls_version                           = "1.3"
 
     application_stack {
       docker {

diff --git a/core/terraform/airlock/main.tf b/core/terraform/airlock/main.tf
@@ -3,7 +3,7 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = ">= 3.117"
+      version = ">= 4.14.0"
     }
     azapi = {
       source  = "Azure/azapi"

diff --git a/core/terraform/api-webapp.tf b/core/terraform/api-webapp.tf
@@ -83,7 +83,7 @@ resource "azurerm_linux_web_app" "api" {
     vnet_route_all_enabled                        = true
     container_registry_use_managed_identity       = true
     container_registry_managed_identity_client_id = azurerm_user_assigned_identity.id.client_id
-    minimum_tls_version                           = "1.2"
+    minimum_tls_version                           = "1.3"
     ftps_state                                    = "Disabled"
 
     application_stack {

diff --git a/core/version.txt b/core/version.txt
@@ -1 +1 @@
-__version__ = "0.12.2"
+__version__ = "0.12.3"