Add temporary firewall rule for SQL Server public access during data load

Author: Vamshi-Microsoft

infra/scripts/process_sample_data.sh

@@ -21,6 +21,8 @@
 	aif_account_resource_id=""
 	# Add global variable for SQL Server public access
 	original_sql_public_access=""
+	created_sql_allow_all_firewall_rule="false"
+	original_full_range_rule_present="false"
 
 	# Function to enable public network access temporarily
 	enable_public_access() {
@@ -127,6 +129,50 @@
 		else
 			echo "✓ SQL Server public access already enabled"
 		fi
+
+		# Add (or verify) a firewall rule allowing all IPs (TEMPORARY)
+        echo "Ensuring temporary wide-open firewall rule exists for data load"
+        sql_allow_all_rule_name="temp-allow-all-ip"
+
+        # Detect if a full-range rule (any name) already existed before we potentially create one
+        pre_existing_full_range_rule=$(az sql server firewall-rule list \
+            --server "$sqlServerName" \
+            --resource-group "$resourceGroupName" \
+            --query "[?startIpAddress=='0.0.0.0' && endIpAddress=='255.255.255.255'] | [0].name" \
+            -o tsv 2>/dev/null)
+        if [ -n "$pre_existing_full_range_rule" ]; then
+            original_full_range_rule_present="true"
+        fi
+
+        existing_allow_all_rule=$(az sql server firewall-rule list \
+            --server "$sqlServerName" \
+            --resource-group "$resourceGroupName" \
+            --query "[?name=='${sql_allow_all_rule_name}'] | [0].name" \
+            -o tsv 2>/dev/null)
+
+        if [ -z "$existing_allow_all_rule" ]; then
+            if [ -n "$pre_existing_full_range_rule" ]; then
+                echo "✓ Existing rule ($pre_existing_full_range_rule) already allows full IP range."
+            else
+                echo "Creating temporary allow-all firewall rule ($sql_allow_all_rule_name)..."
+                if az sql server firewall-rule create \
+                    --resource-group "$resourceGroupName" \
+                    --server "$sqlServerName" \
+                    --name "$sql_allow_all_rule_name" \
+                    --start-ip-address 0.0.0.0 \
+                    --end-ip-address 255.255.255.255 \
+                    --output none; then
+                    created_sql_allow_all_firewall_rule="true"
+                    echo "✓ Temporary allow-all firewall rule created"
+                else
+                    echo "⚠ Warning: Failed to create allow-all firewall rule"
+                fi
+            fi
+        else
+            echo "✓ Temporary allow-all firewall rule already present"
+            # Since it was present beforehand, mark that a full-range rule existed originally
+            original_full_range_rule_present="true"
+        fi
 
 		# Wait a bit for changes to take effect
 		echo "Waiting for network access changes to propagate..."