diff --git a/README.md b/README.md index 794d7a0..12937b7 100644 --- a/README.md +++ b/README.md @@ -69,6 +69,8 @@ zone. This role has a trust relationship with the users account. | [aws_route53_record.api_staging_ready_set_cyber_staging_AAAA](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | | [aws_route53_record.ceil_NS](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | | [aws_route53_record.crossfeed_api_staging_cd_TXT](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | +| [aws_route53_record.crossfeed_integration_acme_TXT](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | +| [aws_route53_record.crossfeed_integration_digicert_letsencrypt_CAA](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | | [aws_route53_record.crossfeed_prod_A](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | | [aws_route53_record.crossfeed_prod_AAAA](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | | [aws_route53_record.crossfeed_prod_acme_TXT](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_record) | resource | diff --git a/route53_crossfeed_app.tf b/route53_crossfeed_app.tf index eb8766c..140d74d 100644 --- a/route53_crossfeed_app.tf +++ b/route53_crossfeed_app.tf @@ -308,6 +308,35 @@ resource "aws_route53_record" "crossfeed_staging_acme_TXT" { zone_id = aws_route53_zone.cyber_dhs_gov.zone_id } +# ------------------------------------------------------------------------------ +# Integration entries +# ------------------------------------------------------------------------------ + +resource "aws_route53_record" "crossfeed_integration_acme_TXT" { + provider = aws.route53resourcechange + + name = "_acme-challenge.integration.crossfeed.${aws_route53_zone.cyber_dhs_gov.name}" + records = [ + "HtrLpSbDjNcA9ZfrEw41G78bco0lZz1AxaLNgR7YmWs", + ] + ttl = 3000 + type = "TXT" + zone_id = aws_route53_zone.cyber_dhs_gov.zone_id +} + +resource "aws_route53_record" "crossfeed_integration_digicert_letsencrypt_CAA" { + provider = aws.route53resourcechange + + name = "integration.crossfeed.${aws_route53_zone.cyber_dhs_gov.name}" + records = [ + "0 issue \"digicert.com\"", + "0 issue \"letsencrypt.org\"", + ] + ttl = 3600 + type = "CAA" + zone_id = aws_route53_zone.cyber_dhs_gov.zone_id +} + # ------------------------------------------------------------------------------ # Staging API entries # ------------------------------------------------------------------------------