Adding Azure Firewall Manager and Azure Firewall Policies

[v-fearam]

Also was updated the AKS version to 1.20.5
It was added a base Firewall Policy

[ckittel]

Just one common question, are the dependsOn right here?

[ckittel]

Should we be building off of basePolicy though more? I mean we want to make sure we're using this feature the way it was designed, to ensure we have easy-to-manage policies for the regional (or even multi) hubs

[v-fearam]

About base policies
https://docs.microsoft.com/en-us/azure/firewall-manager/policy-overview#hierarchical-policies
It is not mandatory, the idea is, if you have a basic organization policies you can define on the baseline policy and then inherit from it.
We need to invent that situation here, In my opinion is out of scope of the RI story

[ckittel]

Don't we have basic org polices? I think we even call them "ORG WIDE" or something. Hence my question :) And then in the multi-region, you'll be able to inherit it twice.

[v-fearam]

About "Don't we have basic org polices? I think we even call them "ORG WIDE" or something. Hence my question :) And then in the multi-region, you'll be able to inherit it twice."

I will add task for next sprint..... Maybe in multicluster we can show it better later on.
Added ADO ticket 415529

done

[ckittel]

Only one small question, otherwise, looks nice. Helps to have a dedciated name for this.

[ckittel]

🚀 Thanks!