Skip to content

Commit

Permalink
add certificate_validation
Browse files Browse the repository at this point in the history
  • Loading branch information
roncitrus committed Feb 6, 2024
1 parent 8d80f6e commit 3a74c3b
Showing 1 changed file with 65 additions and 0 deletions.
65 changes: 65 additions & 0 deletions terraform/environments/cdpt-ifs/route53.tf
Original file line number Diff line number Diff line change
@@ -0,0 +1,65 @@
// DEV + PRE-PRODUCTION DNS CONFIGURATION

// ACM Public Certificate
resource "aws_acm_certificate" "external" {
domain_name = "modernisation-platform.service.justice.gov.uk"
validation_method = "DNS"

subject_alternative_names = ["${var.networking[0].application}.${var.networking[0].business-unit}-${local.environment}.modernisation-platform.service.justice.gov.uk"]
tags = {
Environment = local.environment
}

lifecycle {
create_before_destroy = true
}
}

resource "aws_acm_certificate_validation" "external" {
certificate_arn = aws_acm_certificate.external.arn
validation_record_fqdns = [local.domain_name_main[0], local.domain_name_sub[0]]
}

// Route53 DNS records for certificate validation
resource "aws_route53_record" "external_validation" {
provider = aws.core-network-services

allow_overwrite = true
name = local.domain_name_main[0]
records = local.domain_record_main
ttl = 60
type = local.domain_type_main[0]
zone_id = data.aws_route53_zone.network-services.zone_id
}

resource "aws_route53_record" "external_validation_subdomain" {
provider = aws.core-vpc

allow_overwrite = true
name = local.domain_name_sub[0]
records = local.domain_record_sub
ttl = 60
type = local.domain_type_sub[0]
zone_id = data.aws_route53_zone.external.zone_id
}

// Route53 DNS record for directing traffic to the service
resource "aws_route53_record" "external" {
provider = aws.core-vpc

zone_id = data.aws_route53_zone.external.zone_id
name = "${var.networking[0].application}.${var.networking[0].business-unit}-${local.environment}.modernisation-platform.service.justice.gov.uk"
type = "A"

alias {
name = aws_lb.ifs_lb.dns_name
zone_id = aws_lb.ifs_lb.zone_id
evaluate_target_health = true
}
}


// PRODUCTION DNS CONFIGURATION

// ACM Public Certificate

0 comments on commit 3a74c3b

Please sign in to comment.