NexusV2 & Certs configures firewall with deployment pipeline

[tamirkamara]

Description

As a TRE Developer
I want to configure required firewall rules with the deployment pipeline
So that firewall rules will be managed centrally in the shared service

Acceptance criteria

• Hardcoded rules are removed from Terraform files
• Required rules are present in firewall on azure and in state of the firewall shared service
• Both install and uninstall work

[tamirkamara]

Challenges in doing this:

1. Certs currently needs the firewall rule while running TF as it calls on letsencrypt in the main step so having the pipeline execute the firewall update after the main TF runs isn't easy. I've thought of the following approach: run the TF (without firewall / letsencrypt), pipeline add the fw rules, pipeline calls the primary bundle again with the renew action as that does the same as from within the TF definition. UNKOWN if we can call the primary bundle twice (initial tests caused weird errors).
2. Nexus - while TF creates the VM it also puts user data (scripts) that requires firewall rules that are only created later in the pipeline way. A possible way to forward would be moving to a custom script extension but need to find a way to execute it (similar to the certs, we need to call the primary bundle twice)