Dtspo 18817 sbox zones

[ieuanb74]

Jira link

https://tools.hmcts.net/jira/browse/DTSPO-18817

Change description

• Adding new separate zone for sandbox.apps.hmcts.net and copy across appropriate records from apps.hmcts.net
• Added a shutter file for this new zone
• Added tf code to create the zone/records

Testing done

Checklist

• commit messages are meaningful and follow good commit message guidelines
• README and other documentation has been updated / added (if needed)
• tests have been updated / new tests has been added (if needed)
• Does this PR introduce a breaking change

[hmcts-platform-operations]

Plan Result (Test - TerraformPlanApply)

No changes. Your infrastructure matches the configuration.

[hmcts-platform-operations]

Plan Result (Demo - TerraformPlanApply)

No changes. Your infrastructure matches the configuration.

[hmcts-platform-operations]

Plan Result (Ithc - TerraformPlanApply)

No changes. Your infrastructure matches the configuration.

[hmcts-platform-operations]

Plan Result (Staging - TerraformPlanApply)

No changes. Your infrastructure matches the configuration.

[hmcts-platform-operations]

Plan Result (nle - TerraformPlanApply)

No changes. Your infrastructure matches the configuration.

[hmcts-platform-operations]

Plan Result (Dev - TerraformPlanApply)

No changes. Your infrastructure matches the configuration.

[hmcts-platform-operations]

Plan Result (Prod - TerraformPlanApply)

Plan: 1 to add, 1 to change, 0 to destroy.

• Create
  • module.prod-internal.azurerm_dns_cname_record.this["_E7EFFDA0D7EA8E53D1DE2FCAD2A7987F"]
• Update
  • module.prod-platform.azurerm_dns_cname_record.this["_AC285A78514B19D657B18C29B98F4C7F.vh-admin-web"]

Change Result (Click me)

  # module.prod-internal.azurerm_dns_cname_record.this["_E7EFFDA0D7EA8E53D1DE2FCAD2A7987F"] will be created
  + resource "azurerm_dns_cname_record" "this" {
      + fqdn                = (known after apply)
      + id                  = (known after apply)
      + name                = "_e7effda0d7ea8e53d1de2fcad2a7987f"
      + record              = "E37044FBDB7551F80297AFBDDF8EC02C.7FAFB827F1A91CB8E20FCE52A5215BF3.8ea6365a1b8bb9b5c81c.sectigo.com.."
      + resource_group_name = "reformmgmtrg"
      + ttl                 = 10800
      + zone_name           = "prod.internal.hmcts.net"
    }

  # module.prod-platform.azurerm_dns_cname_record.this["_AC285A78514B19D657B18C29B98F4C7F.vh-admin-web"] will be updated in-place
  ~ resource "azurerm_dns_cname_record" "this" {
        id                  = "/subscriptions/ed302caf-ec27-4c64-a05e-85731c3ce90e/resourceGroups/reformmgmtrg/providers/Microsoft.Network/dnsZones/prod.platform.hmcts.net/CNAME/_ac285a78514b19d657b18c29b98f4c7f.vh-admin-web"
        name                = "_ac285a78514b19d657b18c29b98f4c7f.vh-admin-web"
      ~ record              = "032DDB9A61BB0588601DD6D4C005A812.302202E1FB30DE99CD976C202BDB71AC.fbb25c1fc3c9ad12a80d.sectigo.com." -> "032DDB9A61BB0588601DD6D4C005A812.302202E1FB30DE99CD976C202BDB71AC.d7703fe5d42a59a77748.sectigo.com."
        tags                = {}
        # (5 unchanged attributes hidden)
    }

Plan: 1 to add, 1 to change, 0 to destroy.

[hmcts-platform-operations]

Plan Result (Sandbox - TerraformPlanApply)

Plan: 5 to add, 0 to change, 0 to destroy.

• Create
  • module.sandbox-apps-hmcts.azurerm_dns_cname_record.this["darts.sandbox"]
  • module.sandbox-apps-hmcts.azurerm_dns_cname_record.this["juror-public.sandbox"]
  • module.sandbox-apps-hmcts.azurerm_dns_cname_record.this["juror.sandbox"]
  • module.sandbox-apps-hmcts.azurerm_dns_zone.zone
  • module.sandbox-apps-hmcts.azurerm_role_assignment.dnszonecontributer

Change Result (Click me)

  # module.sandbox-apps-hmcts.azurerm_dns_cname_record.this["darts.sandbox"] will be created
  + resource "azurerm_dns_cname_record" "this" {
      + fqdn                = (known after apply)
      + id                  = (known after apply)
      + name                = "darts.sandbox"
      + record              = "sdshmcts-sbox-bueqa6a6hefjfne4.z01.azurefd.net"
      + resource_group_name = "reformmgmtrg"
      + ttl                 = 300
      + zone_name           = "sandbox.apps.hmcts.net"
    }

  # module.sandbox-apps-hmcts.azurerm_dns_cname_record.this["juror-public.sandbox"] will be created
  + resource "azurerm_dns_cname_record" "this" {
      + fqdn                = (known after apply)
      + id                  = (known after apply)
      + name                = "juror-public.sandbox"
      + record              = "sdshmcts-sbox-bueqa6a6hefjfne4.z01.azurefd.net"
      + resource_group_name = "reformmgmtrg"
      + ttl                 = 300
      + zone_name           = "sandbox.apps.hmcts.net"
    }

  # module.sandbox-apps-hmcts.azurerm_dns_cname_record.this["juror.sandbox"] will be created
  + resource "azurerm_dns_cname_record" "this" {
      + fqdn                = (known after apply)
      + id                  = (known after apply)
      + name                = "juror.sandbox"
      + record              = "sdshmcts-sbox-bueqa6a6hefjfne4.z01.azurefd.net"
      + resource_group_name = "reformmgmtrg"
      + ttl                 = 300
      + zone_name           = "sandbox.apps.hmcts.net"
    }

  # module.sandbox-apps-hmcts.azurerm_dns_zone.zone will be created
  + resource "azurerm_dns_zone" "zone" {
      + id                        = (known after apply)
      + max_number_of_record_sets = (known after apply)
      + name                      = "sandbox.apps.hmcts.net"
      + name_servers              = (known after apply)
      + number_of_record_sets     = (known after apply)
      + resource_group_name       = "reformMgmtRG"

      + soa_record (known after apply)
    }

  # module.sandbox-apps-hmcts.azurerm_role_assignment.dnszonecontributer will be created
  + resource "azurerm_role_assignment" "dnszonecontributer" {
      + id                               = (known after apply)
      + name                             = (known after apply)
      + principal_id                     = "6c2d130e-ba66-408a-bdf9-f426a9730923"
      + principal_type                   = (known after apply)
      + role_definition_id               = (known after apply)
      + role_definition_name             = "DNS Zone Contributor"
      + scope                            = (known after apply)
      + skip_service_principal_aad_check = (known after apply)
    }

Plan: 5 to add, 0 to change, 0 to destroy.