[#IOPID-2401] updated DNS zone (#1342)

pagopa · Dec 6, 2024 · 541675f · 541675f
1 parent 67ac907
commit 541675f
Show file tree

Hide file tree

Showing 3 changed files with 34 additions and 0 deletions.
diff --git a/src/common/_modules/global/modules/dns/dns_ioweb_it.tf b/src/common/_modules/global/modules/dns/dns_ioweb_it.tf
@@ -17,6 +17,12 @@ resource "azurerm_dns_caa_record" "ioweb_it" {
     value = "letsencrypt.org"
   }
 
+  record {
+    flags = 0
+    tag   = "issue"
+    value = "digicert.com"
+  }
+
   record {
     flags = 0
     tag   = "iodef"

diff --git a/src/domains/ioweb-common/06_cdn_itn.tf b/src/domains/ioweb-common/06_cdn_itn.tf
@@ -198,3 +198,29 @@ resource "azurerm_cdn_frontdoor_custom_domain_association" "portal_cdn_domain_as
   cdn_frontdoor_route_ids        = [azurerm_cdn_frontdoor_route.portal_cdn_route.id]
 }
 #####################
+
+#####################
+# DNS ZONE UPDATE
+#####################
+resource "azurerm_dns_cname_record" "account" {
+  name                = "account"
+  zone_name           = data.azurerm_dns_zone.ioapp_it.name
+  resource_group_name = data.azurerm_resource_group.core_ext.name
+  ttl                 = "3600"
+  target_resource_id  = azurerm_cdn_frontdoor_endpoint.portal_cdn_endpoint.id
+}
+
+resource "azurerm_dns_txt_record" "dns_txt" {
+  name                = "_dnsauth.account"
+  zone_name           = data.azurerm_dns_zone.ioapp_it.name
+  resource_group_name = data.azurerm_resource_group.core_ext.name
+  ttl                 = "3600"
+  record {
+    value = azurerm_cdn_frontdoor_custom_domain.portal_custom_domain.validation_token
+  }
+  tags = merge(var.tags, {
+    origin = "account.ioapp.it"
+    cdn    = azurerm_cdn_frontdoor_profile.portal_profile.name
+  })
+}
+####################
diff --git a/src/domains/ioweb-common/README.md b/src/domains/ioweb-common/README.md
@@ -50,6 +50,8 @@
 | [azurerm_cdn_frontdoor_rule.portal_cdn_rule_global](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/cdn_frontdoor_rule) | resource |
 | [azurerm_cdn_frontdoor_rule.portal_cdn_rule_rootfiles](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/cdn_frontdoor_rule) | resource |
 | [azurerm_cdn_frontdoor_rule_set.portal_cdn_rule_set](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/cdn_frontdoor_rule_set) | resource |
+| [azurerm_dns_cname_record.account](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/dns_cname_record) | resource |
+| [azurerm_dns_txt_record.dns_txt](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/dns_txt_record) | resource |
 | [azurerm_key_vault_access_policy.access_policy_auth_n_identity_infra_cd](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault_access_policy) | resource |
 | [azurerm_key_vault_access_policy.access_policy_auth_n_identity_infra_ci](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault_access_policy) | resource |
 | [azurerm_key_vault_access_policy.access_policy_io_infra_cd](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault_access_policy) | resource |