feat: MMC-203 MDC pre migration to Italy

src/40_platform/50_argocd.tf

@@ -9,6 +9,7 @@ resource "kubernetes_namespace" "namespace_argocd" {
 #
 module "argocd" {
   source = "./.terraform/modules/__v4__/kubernetes_argocd_setup"
+  # source = "git::https://github.com/pagopa/terraform-azurerm-v4.git//kubernetes_argocd_setup?ref=PAYMCLOUD-231-argocd-creazione-modulo"
 
   namespace                             = kubernetes_namespace.namespace_argocd.metadata[0].name
   argocd_helm_release_version           = var.argocd_helm_release_version

src/70_domains/idpay_common/21_cdn_assetregister.tf

@@ -39,6 +39,7 @@ locals {
 // public_cstar storage used to serve FE
 module "cdn_idpay_assetregister" {
   source = "./.terraform/modules/__v4__/cdn_frontdoor"
+  # source = "git::https://github.com/pagopa/terraform-azurerm-v4.git//cdn_frontdoor?ref=PAYMCLOUD-477-v-4-creazione-modulo-cdn-front-door-per-sostituire-cdn-classic-deprecata"
 
   cdn_prefix_name     = "${local.project}-asset-register"
   resource_group_name = data.azurerm_resource_group.idpay_data_rg.name

src/70_domains/idpay_common/21_cdn_bonus_elettrodomestici.tf

@@ -229,6 +229,7 @@ locals {
 // Public CDN to serve frontend - main domain
 module "cdn_idpay_bonuselettrodomestici" {
   source = "./.terraform/modules/__v4__/cdn_frontdoor"
+  # source = "git::https://github.com/pagopa/terraform-azurerm-v4.git//cdn_frontdoor?ref=PAYMCLOUD-477-v-4-creazione-modulo-cdn-front-door-per-sostituire-cdn-classic-deprecata"
 
   # Basic Configuration
   cdn_prefix_name     = "${local.project}-bonus"

src/70_domains/idpay_common/21_cdn_welfare.tf

@@ -33,7 +33,9 @@ locals {
  */
 // public_cstar storage used to serve FE
 module "cdn_idpay_welfare" {
+
   source = "./.terraform/modules/__v4__/cdn_frontdoor"
+  # source = "git::https://github.com/pagopa/terraform-azurerm-v4.git//cdn_frontdoor?ref=PAYMCLOUD-477-v-4-creazione-modulo-cdn-front-door-per-sostituire-cdn-classic-deprecata"
 
   cdn_prefix_name     = "${local.project}-welfare"
   resource_group_name = data.azurerm_resource_group.idpay_data_rg.name

src/70_domains/idpay_security/01_domain_kvs.tf

@@ -14,7 +14,7 @@ module "key_vault" {
   soft_delete_retention_days    = var.env != "prod" ? 7 : 90
   public_network_access_enabled = true
 
-  tags = var.tags
+  tags = module.tag_config.tags
 }
 
 #

src/70_domains/idpay_security/01_tags.tf

@@ -0,0 +1,5 @@
+module "tag_config" {
+  source      = "../../tag_config"
+  domain      = var.domain
+  environment = var.env
+}

src/70_domains/idpay_security/99_variables.tf

@@ -32,13 +32,6 @@ variable "location_short" {
   description = "Location short like eg: neu, weu.."
 }
 
-variable "tags" {
-  type = map(any)
-  default = {
-    CreatedBy = "Terraform"
-  }
-}
-
 variable "domain" {
   type = string
   validation {

src/70_domains/idpay_security/env/itn-dev/terraform.tfvars

@@ -6,15 +6,5 @@ domain         = "idpay"
 location       = "italynorth"
 location_short = "itn"
 
-tags = {
-  CreatedBy    = "Terraform"
-  Environment  = "DEV"
-  Owner        = "CSTAR"
-  Source       = "https://github.com/pagopa/cstar-securehub-infra"
-  CostCenter   = "TS310 - PAGAMENTI & SERVIZI"
-  BusinessUnit = "CStar"
-  domain       = "idpay"
-}
-
 
 input_file = "./secret/itn-dev/configs.json"

src/70_domains/idpay_security/env/itn-prod/terraform.tfvars

@@ -6,14 +6,4 @@ domain         = "idpay"
 location       = "italynorth"
 location_short = "itn"
 
-tags = {
-  CreatedBy    = "Terraform"
-  Environment  = "PROD"
-  Owner        = "CSTAR"
-  Source       = "https://github.com/pagopa/cstar-securehub-infra"
-  CostCenter   = "TS310 - PAGAMENTI & SERVIZI"
-  BusinessUnit = "CStar"
-  domain       = "idpay"
-}
-
 input_file = "./secret/itn-prod/configs.json"

src/70_domains/idpay_security/env/itn-uat/terraform.tfvars

@@ -6,14 +6,4 @@ domain         = "idpay"
 location       = "italynorth"
 location_short = "itn"
 
-tags = {
-  CreatedBy    = "Terraform"
-  Environment  = "UAT"
-  Owner        = "CSTAR"
-  Source       = "https://github.com/pagopa/cstar-securehub-infra"
-  CostCenter   = "TS310 - PAGAMENTI & SERVIZI"
-  BusinessUnit = "CStar"
-  domain       = "idpay"
-}
-
 input_file = "./secret/itn-uat/configs.json"

src/70_domains/mdc_app/00_data.tf

@@ -0,0 +1,65 @@
+# 🔒 Key Vault
+data "azurerm_key_vault" "kv_domain" {
+  name                = local.kv_domain_name
+  resource_group_name = local.kv_domain_rg_name
+}
+
+# 📥 Event Hub Namespace (read-only)
+data "azurerm_eventhub_namespace" "eventhub" {
+  name                = local.eventhub_namespace_name
+  resource_group_name = local.eventhub_namespace_rg_name
+}
+
+# 📊 Monitoring
+data "azurerm_resource_group" "monitor_rg" {
+  name = local.monitor_resource_group_name
+}
+
+data "azurerm_application_insights" "application_insights" {
+  name                = local.monitor_appinsights_name
+  resource_group_name = local.monitor_resource_group_name
+}
+
+data "azurerm_monitor_action_group" "slack" {
+  resource_group_name = local.monitor_resource_group_name
+  name                = local.monitor_action_group_slack
+}
+
+data "azurerm_monitor_action_group" "email" {
+  resource_group_name = local.monitor_resource_group_name
+  name                = local.monitor_action_group_email
+}
+
+data "azurerm_log_analytics_workspace" "log_analytics" {
+  name                = local.log_analytics_workspace_name
+  resource_group_name = local.monitor_resource_group_name
+}
+
+# 🐳 Kubernetes Cluster
+data "azurerm_kubernetes_cluster" "aks" {
+  name                = local.aks_name
+  resource_group_name = local.aks_resource_group_name
+}
+
+# 🔗 API Management
+data "azurerm_api_management" "apim_core" {
+  name                = local.apim_name
+  resource_group_name = local.apim_rg_name
+}
+
+# 🔑 Azure AD
+data "azuread_group" "adgroup_admin" {
+  display_name = "${local.product}-adgroup-admin"
+}
+
+data "azuread_group" "adgroup_developers" {
+  display_name = "${local.product}-adgroup-developers"
+}
+
+data "azuread_group" "adgroup_externals" {
+  display_name = "${local.product}-adgroup-externals"
+}
+
+data "azuread_group" "adgroup_security" {
+  display_name = "${local.product}-adgroup-security"
+}

src/70_domains/mdc_app/01_keyvault.tf

@@ -0,0 +1,9 @@
+#tfsec:ignore:AZU023
+resource "azurerm_key_vault_secret" "appinsights-instrumentation-key" {
+  key_vault_id = data.azurerm_key_vault.kv_domain.id
+  name         = "appinsights-instrumentation-key"
+  value        = data.azurerm_application_insights.application_insights.connection_string
+  content_type = "text/plain"
+
+  tags = local.tags
+}

src/70_domains/mdc_app/01_tags.tf

@@ -0,0 +1,5 @@
+module "tag_config" {
+  source      = "../../tag_config"
+  domain      = var.domain
+  environment = var.env
+}

src/70_domains/mdc_app/02_namespace.tf

@@ -0,0 +1,11 @@
+resource "kubernetes_namespace" "namespace" {
+  metadata {
+    name = var.domain
+  }
+}
+
+resource "kubernetes_namespace" "namespace_system" {
+  metadata {
+    name = "${var.domain}-system"
+  }
+}