mdc italy

umbcoppolabottazzi · umbcoppolabottazzi · commit 7a6bdf33853c · 2026-02-13T17:27:38.000+01:00
diff --git a/.terraform-version b/.terraform-version
@@ -1 +1 @@
-1.13.3
+1.14.4
diff --git a/src/mdc/02_product.tf b/src/mdc/02_product.tf
@@ -21,6 +21,10 @@ resource "azurerm_api_management_product_policy" "this" {
   api_management_name = local.apim_name
 
   xml_content = each.value.policy
+
+  depends_on = [
+    azurerm_api_management_policy_fragment.this
+  ]
 }
 
 resource "azurerm_api_management_product_group" "this" {
diff --git a/src/mdc/99_locals.tf b/src/mdc/99_locals.tf
diff --git a/src/mdc/99_variables.tf b/src/mdc/99_variables.tf
@@ -47,11 +47,6 @@ variable "location_short" {
 
 # MDC specific
 
-variable "ingress_load_balancer_hostname" {
-  type        = string
-  description = "Ingress hostname used by APIM to reach EMD backends."
-}
-
 variable "rate_limit_emd_product" {
   type        = number
   description = "Rate limit for MDC and TPP products."
diff --git a/src/mdc/api/emd_citizen/get-citizen-consent-enabled-list-policy.xml.tpl b/src/mdc/api/emd_citizen/get-citizen-consent-enabled-list-policy.xml.tpl
@@ -13,7 +13,7 @@
 <policies>
     <inbound>
         <base />
-        <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdcitizen" />
+        <set-backend-service base-url="${ingress_load_balancer_hostname}/emdcitizen" />
         <rewrite-uri template="@("/emd/citizen/list/{fiscalCode}/enabled")" />
     </inbound>
     <backend>
diff --git a/src/mdc/api/emd_citizen/get-citizen-consent-enabled-policy.xml.tpl b/src/mdc/api/emd_citizen/get-citizen-consent-enabled-policy.xml.tpl
@@ -13,7 +13,7 @@
 <policies>
     <inbound>
         <base />
-        <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdcitizen" />
+        <set-backend-service base-url="${ingress_load_balancer_hostname}/emdcitizen" />
         <rewrite-uri template="@("/emd/citizen/{tppId}")" />
     </inbound>
     <backend>
diff --git a/src/mdc/api/emd_citizen/get-citizen-consent-list-policy.xml.tpl b/src/mdc/api/emd_citizen/get-citizen-consent-list-policy.xml.tpl
@@ -13,7 +13,7 @@
 <policies>
     <inbound>
         <base />
-        <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdcitizen" />
+        <set-backend-service base-url="${ingress_load_balancer_hostname}/emdcitizen" />
         <rewrite-uri template="@("/emd/citizen/list/{fiscalCode}")" />
     </inbound>
     <backend>
diff --git a/src/mdc/api/emd_citizen/get-citizen-consent-status-policy.xml.tpl b/src/mdc/api/emd_citizen/get-citizen-consent-status-policy.xml.tpl
@@ -13,7 +13,7 @@
 <policies>
     <inbound>
         <base />
-        <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdcitizen" />
+        <set-backend-service base-url="${ingress_load_balancer_hostname}/emdcitizen" />
         <rewrite-uri template="@("/emd/citizen/{fiscalCode}/{tppId}")" />
     </inbound>
     <backend>
diff --git a/src/mdc/api/emd_citizen/openapi.citizen.yml b/src/mdc/api/emd_citizen/openapi.citizen.yml
@@ -1,6 +1,6 @@
 openapi: 3.0.3
 info:
-  title: EMD CITIZEN CONSENT API
+  title: EMD CITIZEN CONSENT API ITN
   version: '1.0'
   description: |-
     EMD CITIZEN CONSENT
diff --git a/src/mdc/api/emd_citizen/post-insert-citizen-consent-policy.xml.tpl b/src/mdc/api/emd_citizen/post-insert-citizen-consent-policy.xml.tpl
@@ -13,7 +13,7 @@
 <policies>
     <inbound>
         <base />
-        <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdcitizen" />
+        <set-backend-service base-url="${ingress_load_balancer_hostname}/emdcitizen" />
         <rewrite-uri template="@("/emd/citizen/{fiscalCode}/{tppId}")" />
     </inbound>
     <backend>
diff --git a/src/mdc/api/emd_citizen/put-update-citizen-consent-policy.xml.tpl b/src/mdc/api/emd_citizen/put-update-citizen-consent-policy.xml.tpl
@@ -13,7 +13,7 @@
 <policies>
     <inbound>
         <base />
-        <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdcitizen" />
+        <set-backend-service base-url="${ingress_load_balancer_hostname}/emdcitizen" />
         <rewrite-uri template="@("/emd/citizen/{fiscalCode}/{tppId}")" />
     </inbound>
     <backend>
diff --git a/src/mdc/api/emd_mdc_citizen/get-citizen-consent-enabled-policy.xml.tpl b/src/mdc/api/emd_mdc_citizen/get-citizen-consent-enabled-policy.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-tpp"))">
-              <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdcitizen" />
+              <set-backend-service base-url="${ingress_load_balancer_hostname}/emdcitizen" />
               <rewrite-uri template="@("/emd/citizen/{tppId}")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_mdc_citizen/get-citizen-consent-status-policy.xml.tpl b/src/mdc/api/emd_mdc_citizen/get-citizen-consent-status-policy.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-tpp"))">
-              <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdcitizen" />
+              <set-backend-service base-url="${ingress_load_balancer_hostname}/emdcitizen" />
               <rewrite-uri template="@("/emd/citizen/{fiscalCode}/{tppId}")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_mdc_citizen/openapi.mdc.citizen.yml b/src/mdc/api/emd_mdc_citizen/openapi.mdc.citizen.yml
@@ -1,6 +1,6 @@
 openapi: 3.0.3
 info:
-  title: EMD CITIZEN OPERATION API
+  title: EMD CITIZEN OPERATION API ITN
   version: '1.0'
   description: |-
     EMD CITIZEN OPERATION API
diff --git a/src/mdc/api/emd_mdc_citizen/post-insert-citizen-consent-policy.xml.tpl b/src/mdc/api/emd_mdc_citizen/post-insert-citizen-consent-policy.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-tpp"))">
-              <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdcitizen" />
+              <set-backend-service base-url="${ingress_load_balancer_hostname}/emdcitizen" />
               <rewrite-uri template="@("/emd/citizen/{fiscalCode}/{tppId}")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_mdc_citizen/put-update-citizen-consent-policy.xml.tpl b/src/mdc/api/emd_mdc_citizen/put-update-citizen-consent-policy.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-tpp"))">
-              <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdcitizen" />
+              <set-backend-service base-url="${ingress_load_balancer_hostname}/emdcitizen" />
               <rewrite-uri template="@("/emd/citizen/{fiscalCode}/{tppId}")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_mdc_testing/get-network-connection.xml.tpl b/src/mdc/api/emd_mdc_testing/get-network-connection.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-tpp"))">
-                <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdtpp" />
+                <set-backend-service base-url="${ingress_load_balancer_hostname}/emdtpp" />
                 <rewrite-uri template="@("/emd/tpp/network/connection/{tppName}")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_mdc_testing/openapi.mdc.tpp.yml b/src/mdc/api/emd_mdc_testing/openapi.mdc.tpp.yml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 
 info:
-  title: EMD TPP NETWORK TESTING API
+  title: EMD TPP NETWORK TESTING API ITN
   version: '1.0'
   description: |-
     EMD TPP NETWORK TESTING
diff --git a/src/mdc/api/emd_message_core/openapi.emd.yml b/src/mdc/api/emd_message_core/openapi.emd.yml
@@ -1,24 +1,13 @@
 openapi: 3.0.3
 
 info:
-  title: Messages dispatcher
+  title: Messages dispatcher ITN
   version: 1.0.0
   description: Service which acts as dispatcher for messages to end-users through 3rd-party application
   contact:
     name: PagoPA S.p.A.
     email: cstar@pagopa.it
 
-servers:
-  - description: Development Test
-    url: https://api-emd.dev.cstar.pagopa.it/emd/message-core
-    x-internal: true
-  - description: User Acceptance Test
-    url: https://api-emd.uat.cstar.pagopa.it/emd/message-core
-    x-internal: true
-  - description: Prod
-    url: https://api-emd.cstar.pagopa.it/emd/message-core
-    x-internal: false
-
 tags:
   - name: submit
     description: Related to 'submit' operations
diff --git a/src/mdc/api/emd_message_core/post-send-courtesy-message-policy.xml.tpl b/src/mdc/api/emd_message_core/post-send-courtesy-message-policy.xml.tpl
@@ -13,7 +13,7 @@
 <policies>
     <inbound>
         <base />
-        <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdmessagecore" />
+        <set-backend-service base-url="${ingress_load_balancer_hostname}/emdmessagecore" />
         <rewrite-uri template="@("/emd/message-core/sendMessage")" />
     </inbound>
     <backend>
diff --git a/src/mdc/api/emd_message_sender/openapi.emd_sender.yml b/src/mdc/api/emd_message_sender/openapi.emd_sender.yml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 
 info:
-  title: Messages dispatcher
+  title: Messages dispatcher ITN
   version: 1.0.0
   description: Service which acts as dispatcher for messages to end-users through 3rd-party application
   contact:
diff --git a/src/mdc/api/emd_payment_core/generate-deeplink.xml.tpl b/src/mdc/api/emd_payment_core/generate-deeplink.xml.tpl
@@ -13,7 +13,7 @@
 <policies>
     <inbound>
         <base />
-        <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdpaymentcore" />
+        <set-backend-service base-url="${ingress_load_balancer_hostname}/emdpaymentcore" />
         <rewrite-uri template="@("/emd/payment/token")" />
     </inbound>
     <backend>
diff --git a/src/mdc/api/emd_payment_core/get-retrieval-payload.xml.tpl b/src/mdc/api/emd_payment_core/get-retrieval-payload.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("send"))">
-              <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdpaymentcore" />
+              <set-backend-service base-url="${ingress_load_balancer_hostname}/emdpaymentcore" />
               <rewrite-uri template="@("/emd/payment/retrievalTokens/{retrievalId}")"/>
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_payment_core/openapi.payment.yaml b/src/mdc/api/emd_payment_core/openapi.payment.yaml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 
 info:
-  title: EMD Payment API
+  title: EMD Payment API ITN
   version: '1.0'
   description: |-
     EMD Payment
diff --git a/src/mdc/api/emd_payment_core/post-save-retrieval-payload.xml.tpl b/src/mdc/api/emd_payment_core/post-save-retrieval-payload.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-tpp"))">
-              <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdpaymentcore" />
+              <set-backend-service base-url="${ingress_load_balancer_hostname}/emdpaymentcore" />
               <rewrite-uri template="@("/emd/payment/retrievalTokens/"+((Jwt)context.Variables["mdcToken"]).Claims.GetValueOrDefault("sub", ""))" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_tpp/get-network-connection.xml.tpl b/src/mdc/api/emd_tpp/get-network-connection.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-tpp"))">
-              <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdtpp" />
+              <set-backend-service base-url="${ingress_load_balancer_hostname}/emdtpp" />
               <rewrite-uri template="@("/emd/tpp/network/connection/{tppName}")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_tpp/get-token-section.xml.tpl b/src/mdc/api/emd_tpp/get-token-section.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-pagopa"))">
-                <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdtpp" />
+                <set-backend-service base-url="${ingress_load_balancer_hostname}/emdtpp" />
                 <rewrite-uri template="@("/emd/tpp/{tppId}/token")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_tpp/get-tpp-detail.xml.tpl b/src/mdc/api/emd_tpp/get-tpp-detail.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-pagopa"))">
-                <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdtpp" />
+                <set-backend-service base-url="${ingress_load_balancer_hostname}/emdtpp" />
                 <rewrite-uri template="@("/emd/tpp/{tppId}")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_tpp/openapi.tpp.yml b/src/mdc/api/emd_tpp/openapi.tpp.yml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 
 info:
-  title: EMD TPP API
+  title: EMD TPP API ITN
   version: '1.0'
   description: |-
     EMD TPP
diff --git a/src/mdc/api/emd_tpp/post-save-tpp-policy.xml.tpl b/src/mdc/api/emd_tpp/post-save-tpp-policy.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-pagopa"))">
-                <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdtpp" />
+                <set-backend-service base-url="${ingress_load_balancer_hostname}/emdtpp" />
                 <rewrite-uri template="@("/emd/tpp/save")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_tpp/put-update-token-section-policy.xml.tpl b/src/mdc/api/emd_tpp/put-update-token-section-policy.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-pagopa"))">
-                <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdtpp" />
+                <set-backend-service base-url="${ingress_load_balancer_hostname}/emdtpp" />
                 <rewrite-uri template="@("/emd/tpp/update/{tppId}/token")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_tpp/put-update-tpp-consent-policy.xml.tpl b/src/mdc/api/emd_tpp/put-update-tpp-consent-policy.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-pagopa"))">
-                <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdtpp" />
+                <set-backend-service base-url="${ingress_load_balancer_hostname}/emdtpp" />
                 <rewrite-uri template="@("/emd/tpp")" />
             </when>
             <otherwise>
diff --git a/src/mdc/api/emd_tpp/put-update-tpp-detail-policy.xml.tpl b/src/mdc/api/emd_tpp/put-update-tpp-detail-policy.xml.tpl
@@ -15,7 +15,7 @@
         <base />
         <choose>
             <when condition="@(((string)context.Variables["groups"]).Contains("emd-pagopa"))">
-                <set-backend-service base-url="https://${ingress_load_balancer_hostname}/emdtpp" />
+                <set-backend-service base-url="${ingress_load_balancer_hostname}/emdtpp" />
                 <rewrite-uri template="@("/emd/tpp/update")" />
             </when>
             <otherwise>
diff --git a/src/mdc/env/itn-dev/terraform.tfvars b/src/mdc/env/itn-dev/terraform.tfvars
@@ -4,8 +4,9 @@ env            = "dev"
 domain         = "mdc"
 location_short = "itn"
 
-ingress_load_balancer_hostname = "REPLACE_WITH_DEV_INGRESS_HOST"
+
 rate_limit_emd_product         = 60
 rate_limit_emd_message         = 60
-mdc_openid_url                 = "https://replace-with-openid.dev/.well-known/openid-configuration"
-mdc_issuer_url                 = "https://replace-with-issuer.dev"
+
+mdc_openid_url                 = "https://api-mcshared.dev.cstar.pagopa.it/auth/.well-known/openid-configuration"
+mdc_issuer_url                 = "https://api-mcshared.dev.cstar.pagopa.it/auth"
diff --git a/src/mdc/env/itn-prod/terraform.tfvars b/src/mdc/env/itn-prod/terraform.tfvars
@@ -4,7 +4,6 @@ env            = "prod"
 domain         = "mdc"
 location_short = "itn"
 
-ingress_load_balancer_hostname = "REPLACE_WITH_PROD_INGRESS_HOST"
 rate_limit_emd_product         = 60
 rate_limit_emd_message         = 60
 mdc_openid_url                 = "https://replace-with-openid.prod/.well-known/openid-configuration"
diff --git a/src/mdc/env/itn-uat/terraform.tfvars b/src/mdc/env/itn-uat/terraform.tfvars
@@ -4,7 +4,6 @@ env            = "uat"
 domain         = "mdc"
 location_short = "itn"
 
-ingress_load_balancer_hostname = "REPLACE_WITH_UAT_INGRESS_HOST"
 rate_limit_emd_product         = 60
 rate_limit_emd_message         = 60
 mdc_openid_url                 = "https://replace-with-openid.uat/.well-known/openid-configuration"

Original file line number	Diff line number	Diff line change
`@@ -21,6 +21,10 @@ resource "azurerm_api_management_product_policy" "this" {`
`21`	`21`	`api_management_name = local.apim_name`
`22`	`22`
`23`	`23`	`xml_content = each.value.policy`
	`24`	`+`
	`25`	`+ depends_on = [`
	`26`	`+ azurerm_api_management_policy_fragment.this`
	`27`	`+ ]`
`24`	`28`	`}`
`25`	`29`
`26`	`30`	`resource "azurerm_api_management_product_group" "this" {`