Dev utils dns (#1117)

* update * graylog dns * Updating graylog url * graylog dns update * Adding vpc_id dependency to DNS in other envs * Adding chekov ignores
cds-snc · Jan 16, 2024 · 7a907d6 · 7a907d6
1 parent 3409eec
commit 7a907d6
Show file tree

Hide file tree

Showing 8 changed files with 62 additions and 1 deletion.
diff --git a/aws/dns/dev.notification.cdssandbox.xyz.tf b/aws/dns/dev.notification.cdssandbox.xyz.tf
@@ -76,4 +76,5 @@ resource "aws_route53_record" "bounce-dev-notification-sandbox-TXT" {
   type     = "TXT"
   ttl      = "300"
   records  = ["v=spf1 include:amazonses.com ~all"]
-}
+}
+
diff --git a/aws/dns/dev.notification.internal.tf b/aws/dns/dev.notification.internal.tf
@@ -0,0 +1,31 @@
+#checkov:skip=CKV2_AWS_38:This is an internal DNS and thus DNSSEC not required
+#checkov:skip=CKV2_AWS_39:DNS Query Logging is not supported for internal DNS
+resource "aws_route53_zone" "dev_internal_dns" {
+  count = var.env == "dev" ? 1 : 0
+  name  = "dev.notification.internal"
+
+  vpc {
+    vpc_id = var.vpc_id
+  }
+}
+
+# Dev Tools DNS
+
+resource "aws_route53_record" "pgadmin_internal_CNAME" {
+  count   = var.env == "dev" ? 1 : 0
+  zone_id = aws_route53_zone.dev_internal_dns[0].zone_id
+  name    = "pgadmin.dev.notification.internal"
+  type    = "CNAME"
+  ttl     = "60"
+  records = ["internal-a83839c0acb264ff7b00f69e94dc3ca3-2136659269.ca-central-1.elb.amazonaws.com"]
+}
+
+resource "aws_route53_record" "graylog_internal_CNAME" {
+  count   = var.env == "dev" ? 1 : 0
+  zone_id = aws_route53_zone.dev_internal_dns[0].zone_id
+  name    = "graylog.dev.notification.internal"
+  type    = "CNAME"
+  ttl     = "60"
+  records = ["internal-a82ca1c11dea44ac5a264c3615f1b2cf-1155384976.ca-central-1.elb.amazonaws.com"]
+}
+
diff --git a/aws/dns/variables.tf b/aws/dns/variables.tf
@@ -20,4 +20,9 @@ variable "route_53_zone_arn" {
   type        = string
   description = "Used by the scratch environment to reference cdssandbox in staging"
   default     = "/hostedzone/Z04028033PLSHVOO9ZJ1Z"
+}
+
+variable "vpc_id" {
+  type        = string
+  description = "Used to associate the internal DNS with the VPC"
 }
diff --git a/env/dev/dns/.terraform.lock.hcl b/env/dev/dns/.terraform.lock.hcl
diff --git a/env/dev/dns/terragrunt.hcl b/env/dev/dns/terragrunt.hcl
@@ -32,6 +32,7 @@ include {
 
 inputs = {
   notification_canada_ca_ses_callback_arn = dependency.common.outputs.notification_canada_ca_ses_callback_arn
+  vpc_id                                  = dependency.common.outputs.vpc_id
   ses_custom_sending_domains              = ["custom-sending-domain.dev.notification.cdssandbox.xyz"]
   lambda_ses_receiving_emails_image_arn   = dependency.ses_receiving_emails.outputs.lambda_ses_receiving_emails_image_arn
 }

diff --git a/env/production/dns/terragrunt.hcl b/env/production/dns/terragrunt.hcl
@@ -36,6 +36,7 @@ include {
 
 inputs = {
   notification_canada_ca_ses_callback_arn = dependency.common.outputs.notification_canada_ca_ses_callback_arn
+  vpc_id                                  = dependency.common.outputs.vpc_id
   ses_custom_sending_domains              = ["notification.gov.bc.ca", "notify.novascotia.ca"]
   lambda_ses_receiving_emails_image_arn   = dependency.ses_receiving_emails.outputs.lambda_ses_receiving_emails_image_arn
 }
diff --git a/env/scratch/dns/terragrunt.hcl b/env/scratch/dns/terragrunt.hcl
@@ -32,6 +32,7 @@ include {
 
 inputs = {
   notification_canada_ca_ses_callback_arn = dependency.common.outputs.notification_canada_ca_ses_callback_arn
+  vpc_id                                  = dependency.common.outputs.vpc_id
   ses_custom_sending_domains              = ["custom-sending-domain.scratch.notification.cdssandbox.xyz"]
   lambda_ses_receiving_emails_image_arn   = dependency.ses_receiving_emails.outputs.lambda_ses_receiving_emails_image_arn
 }

diff --git a/env/staging/dns/terragrunt.hcl b/env/staging/dns/terragrunt.hcl
@@ -32,6 +32,7 @@ include {
 
 inputs = {
   notification_canada_ca_ses_callback_arn = dependency.common.outputs.notification_canada_ca_ses_callback_arn
+  vpc_id                                  = dependency.common.outputs.vpc_id
   ses_custom_sending_domains              = ["custom-sending-domain.staging.notification.cdssandbox.xyz"]
   lambda_ses_receiving_emails_image_arn   = dependency.ses_receiving_emails.outputs.lambda_ses_receiving_emails_image_arn
 }