Merge pull request #858 from DFE-Digital/2048-aytq-migrate-domains

2048 aytq migrate domains

.gitignore

@@ -32,6 +32,8 @@ tmp/pids/*
 .terraform/
 fetch_config.rb
 terraform/application/vendor
+terraform/domains/infrastructure/vendor
+terraform/domains/environment_domains/vendor
 bin/terrafile
 
 # Active Storage folder

Makefile

@@ -202,6 +202,10 @@ aks-preprod: test-cluster
 aks-production: production-cluster
 	$(eval include global_config/production.sh)
 
+.PHONY: domains
+domains:
+	$(eval include global_config/domains.sh)
+
 composed-variables: ## Compose variables needed for deployments
 	$(eval RESOURCE_GROUP_NAME=${AZURE_RESOURCE_PREFIX}-${SERVICE_SHORT}-${CONFIG_SHORT}-rg)
 	$(eval KEYVAULT_NAMES='("${AZURE_RESOURCE_PREFIX}-${SERVICE_SHORT}-${CONFIG_SHORT}-app-kv", "${AZURE_RESOURCE_PREFIX}-${SERVICE_SHORT}-${CONFIG_SHORT}-inf-kv")')
@@ -270,3 +274,31 @@ validate-arm-resources: set-what-if arm-deployment ## Validate ARM resource depl
 get-cluster-credentials: set-azure-account ## Get AKS cluster credentials
 	az aks get-credentials --overwrite-existing -g ${CLUSTER_RESOURCE_GROUP_NAME} -n ${CLUSTER_NAME}
 	kubelogin convert-kubeconfig -l $(if ${GITHUB_ACTIONS},spn,azurecli)
+
+domains-infra-init: bin/terrafile domains composed-variables set-azure-account
+	./bin/terrafile -p terraform/domains/infrastructure/vendor/modules -f terraform/domains/infrastructure/config/zones_Terrafile
+
+	terraform -chdir=terraform/domains/infrastructure init -reconfigure -upgrade \
+		-backend-config=resource_group_name=${RESOURCE_GROUP_NAME} \
+		-backend-config=storage_account_name=${STORAGE_ACCOUNT_NAME} \
+		-backend-config=key=domains_infrastructure.tfstate
+
+domains-infra-plan: domains domains-infra-init  ## Terraform plan for DNS infrastructure (DNS zone and front door). Usage: make domains-infra-plan
+	terraform -chdir=terraform/domains/infrastructure plan -var-file config/zones.tfvars.json
+
+domains-infra-apply: domains domains-infra-init  ## Terraform apply for DNS infrastructure (DNS zone and front door). Usage: make domains-infra-apply
+	terraform -chdir=terraform/domains/infrastructure apply -var-file config/zones.tfvars.json ${AUTO_APPROVE}
+
+domains-init: bin/terrafile domains composed-variables set-azure-account
+	./bin/terrafile -p terraform/domains/environment_domains/vendor/modules -f terraform/domains/environment_domains/config/${CONFIG}_Terrafile
+
+	terraform -chdir=terraform/domains/environment_domains init -upgrade -reconfigure \
+		-backend-config=resource_group_name=${RESOURCE_GROUP_NAME} \
+		-backend-config=storage_account_name=${STORAGE_ACCOUNT_NAME} \
+		-backend-config=key=${ENVIRONMENT}.tfstate
+
+domains-plan: domains-init  ## Terraform plan for DNS environment domains. Usage: make development domains-plan
+	terraform -chdir=terraform/domains/environment_domains plan -var-file config/${CONFIG}.tfvars.json
+
+domains-apply: domains-init ## Terraform apply for DNS environment domains. Usage: make development domains-apply
+	terraform -chdir=terraform/domains/environment_domains apply -var-file config/${CONFIG}.tfvars.json ${AUTO_APPROVE}

global_config/domains.sh

@@ -0,0 +1,4 @@
+AZURE_SUBSCRIPTION=s189-teacher-services-cloud-production
+AZURE_RESOURCE_PREFIX=s189p01
+CONFIG_SHORT=dom
+DISABLE_KEYVAULTS=true

terraform/domains/environment_domains/config/preprod.tfvars.json

@@ -0,0 +1,18 @@
+{
+  "hosted_zone": {
+    "access-your-teaching-qualifications.education.gov.uk": {
+      "front_door_name": "s189p01-aytq-dom-fd",
+      "resource_group_name": "s189p01-aytq-dom-rg",
+      "domains": ["preprod"],
+      "environment_short": "pp",
+      "origin_hostname": "s165t01-aytq-preprod-app.azurewebsites.net"
+    },
+    "check-a-teachers-record.education.gov.uk": {
+      "front_door_name": "s189p01-ctr-dom-fd",
+      "resource_group_name": "s189p01-aytq-dom-rg",
+      "domains": ["preprod"],
+      "environment_short": "pp",
+      "origin_hostname": "s165t01-aytq-preprod-app.azurewebsites.net"
+    }
+  }
+}

terraform/domains/environment_domains/config/preprod_Terrafile

@@ -0,0 +1,3 @@
+domains:
+    source:  "https://github.com/DFE-Digital/terraform-modules"
+    version: "testing"

terraform/domains/environment_domains/config/production.tfvars.json

@@ -0,0 +1,30 @@
+{
+  "hosted_zone": {
+    "access-your-teaching-qualifications.education.gov.uk": {
+      "front_door_name": "s189p01-aytq-dom-fd",
+      "resource_group_name": "s189p01-aytq-dom-rg",
+      "domains": ["apex", "www"],
+      "environment_short": "pd",
+      "redirect_rules": [
+        {
+          "from-domain": "www",
+          "to-domain": "access-your-teaching-qualifications.education.gov.uk"
+        }
+      ],
+      "origin_hostname": "s165p01-aytq-production-app.azurewebsites.net"
+    },
+    "check-a-teachers-record.education.gov.uk": {
+      "front_door_name": "s189p01-ctr-dom-fd",
+      "resource_group_name": "s189p01-aytq-dom-rg",
+      "domains": ["apex", "www"],
+      "environment_short": "pd",
+      "redirect_rules": [
+        {
+          "from-domain": "www",
+          "to-domain": "check-a-teachers-record.education.gov.uk"
+        }
+      ],
+      "origin_hostname": "s165p01-aytq-production-app.azurewebsites.net"
+    }
+  }
+}

terraform/domains/environment_domains/config/production_Terrafile

@@ -0,0 +1,3 @@
+domains:
+    source:  "https://github.com/DFE-Digital/terraform-modules"
+    version: "stable"

terraform/domains/environment_domains/config/test.tfvars.json

@@ -0,0 +1,18 @@
+{
+  "hosted_zone": {
+    "access-your-teaching-qualifications.education.gov.uk": {
+      "front_door_name": "s189p01-aytq-dom-fd",
+      "resource_group_name": "s189p01-aytq-dom-rg",
+      "domains": ["test"],
+      "environment_short": "test",
+      "origin_hostname": "s165t01-aytq-test-app.azurewebsites.net"
+    },
+    "check-a-teachers-record.education.gov.uk": {
+      "front_door_name": "s189p01-ctr-dom-fd",
+      "resource_group_name": "s189p01-aytq-dom-rg",
+      "domains": ["test"],
+      "environment_short": "test",
+      "origin_hostname": "s165t01-aytq-test-app.azurewebsites.net"
+    }
+  }
+}

terraform/domains/environment_domains/config/test_Terrafile

@@ -0,0 +1,3 @@
+domains:
+    source:  "https://github.com/DFE-Digital/terraform-modules"
+    version: "testing"

terraform/domains/environment_domains/main.tf

@@ -0,0 +1,14 @@
+# Used to create domains to be managed by front door.
+module "domains" {
+  for_each            = var.hosted_zone
+  source              = "./vendor/modules/domains//domains/environment_domains"
+  zone                = each.key
+  front_door_name     = each.value.front_door_name
+  resource_group_name = each.value.resource_group_name
+  domains             = each.value.domains
+  environment         = each.value.environment_short
+  host_name           = each.value.origin_hostname
+  null_host_header    = try(each.value.null_host_header, false)
+  cached_paths        = try(each.value.cached_paths, [])
+  redirect_rules      = try(each.value.redirect_rules, [])
+}

terraform/domains/environment_domains/terraform.tf

@@ -0,0 +1,19 @@
+terraform {
+
+  required_version = "= 1.6.4"
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = "3.116.0"
+    }
+  }
+  backend "azurerm" {
+    container_name = "terraform-state"
+  }
+}
+
+provider "azurerm" {
+  features {}
+
+  skip_provider_registration = true
+}

terraform/domains/environment_domains/variables.tf

@@ -0,0 +1,4 @@
+variable "hosted_zone" {
+  type    = map(any)
+  default = {}
+}

terraform/domains/infrastructure/config/zones.tfvars.json

@@ -0,0 +1,12 @@
+{
+  "hosted_zone": {
+    "access-your-teaching-qualifications.education.gov.uk": {
+      "resource_group_name": "s189p01-aytq-dom-rg",
+      "front_door_name": "s189p01-aytq-dom-fd"
+    },
+    "check-a-teachers-record.education.gov.uk": {
+      "resource_group_name": "s189p01-aytq-dom-rg",
+      "front_door_name": "s189p01-ctr-dom-fd"
+    }
+  }
+}

terraform/domains/infrastructure/config/zones_Terrafile

@@ -0,0 +1,3 @@
+domains:
+    source:  "https://github.com/DFE-Digital/terraform-modules"
+    version: "stable"

terraform/domains/infrastructure/main.tf

@@ -0,0 +1,5 @@
+module "domains_infrastructure" {
+  source                 = "./vendor/modules/domains//domains/infrastructure"
+  hosted_zone            = var.hosted_zone
+  deploy_default_records = var.deploy_default_records
+}

terraform/domains/infrastructure/terraform.tf

@@ -0,0 +1,19 @@
+terraform {
+  required_version = "= 1.6.4"
+
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = "3.116.0"
+    }
+  }
+  backend "azurerm" {
+    container_name = "terraform-state"
+  }
+}
+
+provider "azurerm" {
+  features {}
+
+  skip_provider_registration = true
+}

terraform/domains/infrastructure/variables.tf

@@ -0,0 +1,7 @@
+variable "hosted_zone" {
+  type = map(any)
+}
+
+variable "deploy_default_records" {
+  default = true
+}