Support for [thing]

[J-Are]

Is there an existing issue for this?

• I have searched the existing issues

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Hi,
I would like to deploy an Azure Firewall with a FQDN tags rules (e.g for AzureKubernetesService) so I have to to define in azurerm_firewall resource the dns_servers list.

For business/connectivity constraints, I need to use default Azure DNS server.
From UI, the checkbox "default (Azure provided)" is available as you can see in the picture below:

I did not found a "clean" way to do the same configuration thanks to azurerm_firewall resource. I try to show my Firewall configuration by doing configuration manually and after that show it thanks to terraform state show command. The output shows an empty list for dns_servers.

I found a workarround by using a custom dns servers and using the known Azure DNS server ip 168.63.129.16 but I think it would be better to have a configuration specified in the azurerm_firewall resource documentation. At the moment, nothing is mentionned into it.

Regards,
Julien

New or Affected Resource(s)/Data Source(s)

azurerm_firewall

Potential Terraform Configuration

No response

References

`resource "azurerm_firewall" "firewall_aks" {
name = "${local.location_shortcut}-frri-fw-${var.environment}-kcl${var.project}-01"
location = var.resource_group_location
resource_group_name = var.existing_vnet_resource_group_name
sku_name = "AZFW_VNet"
sku_tier = "Standard"
dns_servers = ["168.63.129.16"]

ip_configuration {
name = "AKSFW"
subnet_id = data.azurerm_subnet.firewall_aks_subnet.id
public_ip_address_id = azurerm_public_ip.firewall_aks_public_ip.id
}
tags = local.tags
}`