Italy North Migration - Create new monitoring infrastructure #1653

ansmatbitrock · 2025-09-24T07:40:00Z

Create new Application Insights and Log Analytics Group in ITN

github-actions · 2025-09-25T14:58:45Z

📖 Terraform Plan (src/core/prod) - success

Show Plan

No changes detected.

github-actions · 2025-09-26T07:53:36Z

📋 Pre-commit Output Log

[INFO] Initializing environment for https://github.com/pagopa/dx.
[INFO] Initializing environment for https://github.com/antonbabenko/pre-commit-terraform.
Lock Terraform Registry modules..........................................Failed
- hook id: lock_modules
- exit code: 1

INFO: Detecting Terraform directories...
INFO: Found 1 Terraform directories to process:
INFO:   - src/core/prod
INFO: Processing directory: src/core/prod
WARN: Running terraform get in /__w/io-infra/io-infra/src/core/prod
╷
│ Error: Duplicate output definition
│ 
│   on ../_modules/key_vaults/outputs.tf line 26:
│   26: output "io_p_itn_platform_kv_01" {
│ 
│ An output named "io_p_itn_platform_kv_01" was already defined at ../_modules/key_vaults/outputs.tf:9,1-33. Output names must be unique within a module.
╵

ERROR: terraform get failed
WARN: Changes detected in one or more modules
INFO: JSON output written to lock_output.json

_{Generated on Fri Sep 26 07:53:35 UTC 2025
Run lock_modules on folder: src/core/prod/}

github-actions · 2025-09-30T13:17:52Z

📖 Terraform Plan ('src/common/prod') - failure

Terraform Plan

data.azurerm_linux_function_app.wallet_user_uat: Still reading... [10s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.ipatente_payments_app_itn: Still reading... [10s elapsed]
data.azurerm_linux_function_app.function_assets_cdn: Still reading... [10s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.ipatente_licences_app_itn: Still reading... [10s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.ipatente_practices_app_itn: Still reading... [10s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.fims_op_app: Still reading... [10s elapsed]
data.azurerm_linux_function_app.services_app_backend_function_app: Still reading... [10s elapsed]
data.azurerm_linux_function_app.io_sign_user: Still reading... [10s elapsed]
data.azurerm_linux_web_app.firmaconio_selfcare_web_app: Still reading... [10s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.ipatente_vehicles_app_itn: Still reading... [10s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.ipatente_payments_app_itn: Still reading... [20s elapsed]
data.azurerm_linux_function_app.function_assets_cdn: Still reading... [20s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.ipatente_licences_app_itn: Still reading... [20s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.ipatente_practices_app_itn: Still reading... [20s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.fims_op_app: Still reading... [20s elapsed]
data.azurerm_linux_function_app.io_sign_user: Still reading... [20s elapsed]
data.azurerm_linux_web_app.firmaconio_selfcare_web_app: Still reading... [20s elapsed]
module.function_app_services.data.azurerm_linux_function_app.rf_func: Still reading... [10s elapsed]
data.azurerm_linux_function_app.function_assets_cdn: Still reading... [30s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.ipatente_payments_app_itn: Still reading... [10s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.ipatente_practices_app_itn: Still reading... [10s elapsed]
data.azurerm_linux_function_app.function_profile: Still reading... [10s elapsed]
data.azurerm_linux_function_app.io_sign_user: Still reading... [30s elapsed]
data.azurerm_linux_function_app.wallet_user: Still reading... [10s elapsed]
data.azurerm_linux_web_app.firmaconio_selfcare_web_app: Still reading... [30s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.appservice_devportal_be: Still reading... [10s elapsed]
data.azurerm_linux_function_app.function_assets_cdn: Still reading... [40s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.cms_backoffice_app_itn: Still reading... [10s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.ipatente_payments_app_itn: Still reading... [20s elapsed]
data.azurerm_linux_function_app.lollipop_function: Still reading... [10s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.appservice_devportal_be: Still reading... [20s elapsed]
data.azurerm_linux_function_app.function_assets_cdn: Still reading... [50s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.ipatente_licences_app_itn: Still reading... [10s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.appservice_devportal_be: Still reading... [10s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.cms_backoffice_app_itn: Still reading... [10s elapsed]
data.azurerm_linux_function_app.com_citizen_func: Still reading... [10s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.appservice_continua: Still reading... [10s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.fims_op_app: Still reading... [10s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.appservice_devportal_be: Still reading... [30s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.ipatente_licences_app_itn: Still reading... [20s elapsed]
data.azurerm_linux_function_app.io_fims_user: Still reading... [10s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.appservice_devportal_be: Still reading... [20s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.cms_backoffice_app_itn: Still reading... [20s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.ipatente_vehicles_app_itn: Still reading... [10s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.session_manager_03: Still reading... [10s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.appservice_continua: Still reading... [20s elapsed]
module.application_gateway_weu.data.azurerm_linux_web_app.fims_op_app: Still reading... [20s elapsed]
data.azurerm_linux_function_app.eucovidcert: Still reading... [10s elapsed]
module.app_backend_weu["1"].data.azurerm_key_vault_secret.app_backend_PAGOPA_API_KEY_UAT: 
Error: expected length of short_name to be in the range (1 - 12), got io-p-itn-error-ag-01

  with module.monitoring_itn.azurerm_monitor_action_group.error,
  on ../_modules/monitoring/ag.tf line 4, in resource "azurerm_monitor_action_group" "error":
   4:   short_name          = try(local.nonstandard[var.location_short].ag_error, "${var.project}-error-ag-01")


Error: expected length of short_name to be in the range (1 - 12), got io-p-itn-qerr-ag-01

  with module.monitoring_itn.azurerm_monitor_action_group.quarantine_error,
  on ../_modules/monitoring/ag.tf line 30, in resource "azurerm_monitor_action_group" "quarantine_error":
  30:   short_name          = try(local.nonstandard[var.location_short].ag_quarantine_error_short, "${var.project}-qerr-ag-01")


Error: expected length of short_name to be in the range (1 - 12), got io-p-itn-email-ag-01

  with module.monitoring_itn.azurerm_monitor_action_group.email,
  on ../_modules/monitoring/ag.tf line 44, in resource "azurerm_monitor_action_group" "email":
  44:   short_name          = try(local.nonstandard[var.location_short].email_pagopa, "${var.project}-email-ag-01")


Error: expected length of short_name to be in the range (1 - 12), got io-p-itn-slack-ag-01

  with module.monitoring_itn.azurerm_monitor_action_group.slack,
  on ../_modules/monitoring/ag.tf line 58, in resource "azurerm_monitor_action_group" "slack":
  58:   short_name          = try(local.nonstandard[var.location_short].slack_pagopa, "${var.project}-slack-ag-01")

data.azurerm_linux_function_app.io_fims_user: Still reading... [20s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.appservice_continua: Still reading... [10s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.session_manager_03: Still reading... [10s elapsed]
data.azurerm_linux_function_app.eucovidcert: Still reading... [20s elapsed]
module.apim_itn.data.azurerm_linux_web_app.cgn_pe_backend_app_01: Still reading... [10s elapsed]
module.application_gateway_itn.data.azurerm_linux_web_app.session_manager_03: Still reading... [20s elapsed]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place
  - destroy
 <= read (data resources)

Terraform planned the following actions, but then encountered a problem:

  # module.application_gateway_itn.azurerm_web_application_firewall_policy.agw will be updated in-place
  ~ resource "azurerm_web_application_firewall_policy" "agw" {
        id                  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/io-p-itn-agw-waf-01"
        name                = "io-p-itn-agw-waf-01"
        tags                = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (4 unchanged attributes hidden)

      ~ policy_settings {
          ~ request_body_enforcement                  = false -> true
          ~ request_body_inspect_limit_in_kb          = 0 -> 128
            # (7 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.application_gateway_itn.azurerm_web_application_firewall_policy.app will be updated in-place
  ~ resource "azurerm_web_application_firewall_policy" "app" {
        id                  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/io-p-itn-agw-api-app-waf-01"
        name                = "io-p-itn-agw-api-app-waf-01"
        tags                = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (4 unchanged attributes hidden)

      ~ policy_settings {
          ~ request_body_enforcement                  = false -> true
          ~ request_body_inspect_limit_in_kb          = 0 -> 128
            # (7 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.application_gateway_weu.azurerm_web_application_firewall_policy.api_app will be updated in-place
  ~ resource "azurerm_web_application_firewall_policy" "api_app" {
        id                  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-external/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/io-p-waf-appgateway-api-app-policy"
        name                = "io-p-waf-appgateway-api-app-policy"
        tags                = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (4 unchanged attributes hidden)

      ~ policy_settings {
          ~ request_body_enforcement                  = false -> true
          ~ request_body_inspect_limit_in_kb          = 0 -> 128
            # (7 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.cosmos_api_weu.azurerm_cosmosdb_sql_container.these["notifications"] will be updated in-place
  ~ resource "azurerm_cosmosdb_sql_container" "these" {
        id                  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-internal/providers/Microsoft.DocumentDB/databaseAccounts/io-p-cosmos-api/sqlDatabases/db/containers/notifications"
        name                = "notifications"
        # (6 unchanged attributes hidden)

      ~ autoscale_settings {
          ~ max_throughput = 14000 -> 13000
        }

        # (2 unchanged blocks hidden)
    }

  # module.cosmos_api_weu.azurerm_cosmosdb_sql_container.these["services-preferences"] will be updated in-place
  ~ resource "azurerm_cosmosdb_sql_container" "these" {
        id                  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-internal/providers/Microsoft.DocumentDB/databaseAccounts/io-p-cosmos-api/sqlDatabases/db/containers/services-preferences"
        name                = "services-preferences"
        # (6 unchanged attributes hidden)

      ~ autoscale_settings {
          ~ max_throughput = 4000 -> 2000
        }

        # (2 unchanged blocks hidden)
    }

  # module.function_app_services.azurerm_storage_management_policy.processing_messages_container_rule will be destroyed
  # (because azurerm_storage_management_policy.processing_messages_container_rule is not in configuration)
  - resource "azurerm_storage_management_policy" "processing_messages_container_rule" {
      - id                 = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-funcsvc-rg-01/providers/Microsoft.Storage/storageAccounts/iopitnfuncsvcst01/managementPolicies/default" -> null
      - storage_account_id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-funcsvc-rg-01/providers/Microsoft.Storage/storageAccounts/iopitnfuncsvcst01" -> null

      - rule {
          - enabled = true -> null
          - name    = "deleteafterdays" -> null

          - actions {
              - base_blob {
                  - auto_tier_to_hot_from_cool_enabled                             = false -> null
                  - delete_after_days_since_creation_greater_than                  = 1 -> null
                  - delete_after_days_since_last_access_time_greater_than          = -1 -> null
                  - delete_after_days_since_modification_greater_than              = -1 -> null
                  - tier_to_archive_after_days_since_creation_greater_than         = -1 -> null
                  - tier_to_archive_after_days_since_last_access_time_greater_than = -1 -> null
                  - tier_to_archive_after_days_since_last_tier_change_greater_than = -1 -> null
                  - tier_to_archive_after_days_since_modification_greater_than     = -1 -> null
                  - tier_to_cold_after_days_since_creation_greater_than            = -1 -> null
                  - tier_to_cold_after_days_since_last_access_time_greater_than    = -1 -> null
                  - tier_to_cold_after_days_since_modification_greater_than        = -1 -> null
                  - tier_to_cool_after_days_since_creation_greater_than            = -1 -> null
                  - tier_to_cool_after_days_since_last_access_time_greater_than    = -1 -> null
                  - tier_to_cool_after_days_since_modification_greater_than        = -1 -> null
                }
              - snapshot {
                  - change_tier_to_archive_after_days_since_creation               = -1 -> null
                  - change_tier_to_cool_after_days_since_creation                  = -1 -> null
                  - delete_after_days_since_creation_greater_than                  = 1 -> null
                  - tier_to_archive_after_days_since_last_tier_change_greater_than = -1 -> null
                  - tier_to_cold_after_days_since_creation_greater_than            = -1 -> null
                }
              - version {
                  - change_tier_to_archive_after_days_since_creation               = -1 -> null
                  - change_tier_to_cool_after_days_since_creation                  = -1 -> null
                  - delete_after_days_since_creation                               = 1 -> null
                  - tier_to_archive_after_days_since_last_tier_change_greater_than = -1 -> null
                  - tier_to_cold_after_days_since_creation_greater_than            = -1 -> null
                }
            }

          - filters {
              - blob_types   = [
                  - "blockBlob",
                ] -> null
              - prefix_match = [
                  - "processing-messages",
                ] -> null
            }
        }
    }

  # module.monitoring_itn.azurerm_application_insights.appi will be created
  + resource "azurerm_application_insights" "appi" {
      + app_id                              = (known after apply)
      + application_type                    = "other"
      + connection_string                   = (sensitive value)
      + daily_data_cap_in_gb                = 300
      + disable_ip_masking                  = true
      + force_customer_storage_for_profiler = false
      + id                                  = (known after apply)
      + instrumentation_key                 = (sensitive value)
      + internet_ingestion_enabled          = true
      + internet_query_enabled              = true
      + local_authentication_disabled       = false
      + location                            = "italynorth"
      + name                                = "io-p-itn-appi-01"
      + resource_group_name                 = "io-p-itn-common-rg-01"
      + retention_in_days                   = 90
      + sampling_percentage                 = 100
      + tags                                = {
          + "BusinessUnit"   = "App IO"
          + "CostCenter"     = "TS000 - Tecnologia e Servizi"
          + "CreatedBy"      = "Terraform"
          + "Environment"    = "Prod"
          + "ManagementTeam" = "IO Platform"
          + "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
      + workspace_id                        = (known after apply)
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["CIE L2"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "CIE L2-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/login?authLevel=SpidL2&entityID=xx_servizicie"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["CIE L3"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "CIE L3-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/login?authLevel=SpidL3&entityID=xx_servizicie"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["Spid-registry"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = false
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "Spid-registry-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://registry.spid.gov.it/metadata/idp/spid-entities-idps.xml"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["SpidL2-arubaid"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "SpidL2-arubaid-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/login?authLevel=SpidL2&entityID=arubaid"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["SpidL2-infocamere"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = false
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "SpidL2-infocamere-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/login?authLevel=SpidL2&entityID=infocamereid"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["SpidL2-infocertid"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "SpidL2-infocertid-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/login?authLevel=SpidL2&entityID=infocertid"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["SpidL2-lepidaid"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "SpidL2-lepidaid-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/login?authLevel=SpidL2&entityID=lepidaid"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["SpidL2-namirialid"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "SpidL2-namirialid-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/login?authLevel=SpidL2&entityID=namirialid"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["SpidL2-posteid"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = false
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "SpidL2-posteid-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/login?authLevel=SpidL2&entityID=posteid"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["SpidL2-sielteid"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = false
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "SpidL2-sielteid-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/login?authLevel=SpidL2&entityID=sielteid"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["SpidL2-spiditalia"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "SpidL2-spiditalia-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/login?authLevel=SpidL2&entityID=spiditalia"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 1
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["api-app.io.pagopa.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "api-app.io.pagopa.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://api-app.io.pagopa.it/info"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["api-mtls.io.pagopa.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "api-mtls.io.pagopa.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://api-mtls.io.pagopa.it"
        }

      + validation_rules {
          + expected_status_code = 400
          + ssl_check_enabled    = false
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["api-web.io.pagopa.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "api-web.io.pagopa.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://api-web.io.pagopa.it"
        }

      + validation_rules {
          + expected_status_code        = 404
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["api.io.italia.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "api.io.italia.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://api.io.italia.it"
        }

      + validation_rules {
          + expected_status_code        = 404
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["api.io.pagopa.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "api.io.pagopa.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://api.io.pagopa.it"
        }

      + validation_rules {
          + expected_status_code        = 404
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["app-backend.io.italia.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "app-backend.io.italia.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://app-backend.io.italia.it/info"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["assets.cdn.io.italia.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "assets.cdn.io.italia.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://assets.cdn.io.italia.it/status/backend.json"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["assets.cdn.io.pagopa.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "assets.cdn.io.pagopa.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://assets.cdn.io.pagopa.it/status/backend.json"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["continua.io.pagopa.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "continua.io.pagopa.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://continua.io.pagopa.it"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["developerportal-backend.io.italia.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "developerportal-backend.io.italia.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://developerportal-backend.io.italia.it/info"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["firmaconio.selfcare.pagopa.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "firmaconio.selfcare.pagopa.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://firmaconio.selfcare.pagopa.it/health"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["github-raw-status-backend"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = false
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "github-raw-status-backend-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://raw.githubusercontent.com/pagopa/io-services-metadata/master/status/backend.json"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_application_insights_standard_web_test.web_tests["io.italia.it"] will be created
  + resource "azurerm_application_insights_standard_web_test" "web_tests" {
      + application_insights_id = (known after apply)
      + enabled                 = true
      + frequency               = 900
      + geo_locations           = [
          + "emea-nl-ams-azr",
        ]
      + id                      = (known after apply)
      + location                = "italynorth"
      + name                    = "io.italia.it-test-io-p-itn-appi-01"
      + resource_group_name     = "io-p-itn-common-rg-01"
      + retry_enabled           = true
      + synthetic_monitor_id    = (known after apply)
      + timeout                 = 30

      + request {
          + follow_redirects_enabled         = false
          + http_verb                        = "GET"
          + parse_dependent_requests_enabled = false
          + url                              = "https://io.italia.it"
        }

      + validation_rules {
          + expected_status_code        = 200
          + ssl_cert_remaining_lifetime = 7
          + ssl_check_enabled           = true
        }
    }

  # module.monitoring_itn.azurerm_key_vault_secret.appinsights_connection_string will be created
  + resource "azurerm_key_vault_secret" "appinsights_connection_string" {
      + content_type            = "full connection string, example InstrumentationKey=XXXXX"
      + id                      = (known after apply)
      + key_vault_id            = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.KeyVault/vaults/io-p-itn-platform-kv-01"
      + name                    = "appinsights-connection-string"
      + resource_id             = (known after apply)
      + resource_versionless_id = (known after apply)
      + value                   = (sensitive value)
      + version                 = (known after apply)
      + versionless_id          = (known after apply)
    }

  # module.monitoring_itn.azurerm_key_vault_secret.appinsights_instrumentation_key will be created
  + resource "azurerm_key_vault_secret" "appinsights_instrumentation_key" {
      + content_type            = "only instrumentation key"
      + id                      = (known after apply)
      + key_vault_id            = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.KeyVault/vaults/io-p-itn-platform-kv-01"
      + name                    = "appinsights-instrumentation-key"
      + resource_id             = (known after apply)
      + resource_versionless_id = (known after apply)
      + value                   = (sensitive value)
      + version                 = (known after apply)
      + versionless_id          = (known after apply)
    }

  # module.monitoring_itn.azurerm_log_analytics_workspace.log will be created
  + resource "azurerm_log_analytics_workspace" "log" {
      + allow_resource_only_permissions = true
      + daily_quota_gb                  = -1
      + id                              = (known after apply)
      + internet_ingestion_enabled      = true
      + internet_query_enabled          = true
      + local_authentication_disabled   = (known after apply)
      + local_authentication_enabled    = (known after apply)
      + location                        = "italynorth"
      + name                            = "io-p-itn-log-01"
      + primary_shared_key              = (sensitive value)
      + resource_group_name             = "io-p-itn-common-rg-01"
      + retention_in_days               = 90
      + secondary_shared_key            = (sensitive value)
      + sku                             = "PerGB2018"
      + tags                            = {
          + "BusinessUnit"   = "App IO"
          + "CostCenter"     = "TS000 - Tecnologia e Servizi"
          + "CreatedBy"      = "Terraform"
          + "Environment"    = "Prod"
          + "ManagementTeam" = "IO Platform"
          + "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
      + workspace_id                    = (known after apply)
    }

  # module.function_app_services.module.function_services_dx.azurerm_linux_function_app.this will be updated in-place
  ~ resource "azurerm_linux_function_app" "this" {
      ~ app_settings                                   = {
          + "APPINSIGHTS_INSTRUMENTATIONKEY"                  = "ab45103a-cb4f-474b-933f-d802ed1082d5"
            # (61 unchanged elements hidden)
        }
        id                                             = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-funcsvc-rg-01/providers/Microsoft.Web/sites/io-p-itn-funcsvc-func-01"
        name                                           = "io-p-itn-funcsvc-func-01"
        tags                                           = {
            "BusinessUnit"                           = "App IO"
            "CostCenter"                             = "TS000 - Tecnologia e Servizi"
            "CreatedBy"                              = "Terraform"
            "Environment"                            = "Prod"
            "ManagementTeam"                         = "IO Platform"
            "ModuleName"                             = "azure_function_app"
            "ModuleSource"                           = "DX"
            "ModuleVersion"                          = "2.0.2"
            "Source"                                 = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (33 unchanged attributes hidden)

        # (3 unchanged blocks hidden)
    }

  # module.function_app_services.module.function_services_dx.azurerm_linux_function_app_slot.this[0] will be updated in-place
  ~ resource "azurerm_linux_function_app_slot" "this" {
      ~ app_settings                                   = {
          + "APPINSIGHTS_INSTRUMENTATIONKEY"                  = "ab45103a-cb4f-474b-933f-d802ed1082d5"
            # (61 unchanged elements hidden)
        }
        id                                             = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-funcsvc-rg-01/providers/Microsoft.Web/sites/io-p-itn-funcsvc-func-01/slots/staging"
        name                                           = "staging"
        tags                                           = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "ModuleName"     = "azure_function_app"
            "ModuleSource"   = "DX"
            "ModuleVersion"  = "2.0.2"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (31 unchanged attributes hidden)

      ~ site_config {
          - application_insights_key                      = (sensitive value) -> null
          ~ health_check_eviction_time_in_min             = 0 -> 2
            # (32 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.platform_api_gateway_apim_itn.module.platform_api_gateway.azurerm_api_management.this will be updated in-place
  ~ resource "azurerm_api_management" "this" {
        id                            = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.ApiManagement/service/io-p-itn-platform-api-gateway-apim-01"
        name                          = "io-p-itn-platform-api-gateway-apim-01"
        tags                          = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "ModuleName"     = "azure_api_management"
            "ModuleSource"   = "DX"
            "ModuleVersion"  = "1.2.2"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (21 unchanged attributes hidden)

      ~ hostname_configuration {
          ~ proxy {
              ~ default_ssl_binding             = true -> false
                # (12 unchanged attributes hidden)
            }

            # (1 unchanged block hidden)
        }

        # (8 unchanged blocks hidden)
    }

  # module.platform_service_bus_namespace_itn.module.platform_service_bus_namespace.data.azurerm_private_dns_zone.this[0] will be read during apply
  # (depends on a resource or a module with changes pending)
 <= data "azurerm_private_dns_zone" "this" {
      + id                                                    = (known after apply)
      + max_number_of_record_sets                             = (known after apply)
      + max_number_of_virtual_network_links                   = (known after apply)
      + max_number_of_virtual_network_links_with_registration = (known after apply)
      + name                                                  = "privatelink.servicebus.windows.net"
      + number_of_record_sets                                 = (known after apply)
      + resource_group_name                                   = "io-p-evt-rg"
    }

  # module.platform_service_bus_namespace_itn.module.platform_service_bus_namespace.azurerm_private_endpoint.service_bus_pep[0] will be updated in-place
  ~ resource "azurerm_private_endpoint" "service_bus_pep" {
        id                            = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/privateEndpoints/io-p-itn-platform-sbns-pep-01"
        name                          = "io-p-itn-platform-sbns-pep-01"
        tags                          = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "ModuleName"     = "azure_service_bus_namespace"
            "ModuleSource"   = "DX"
            "ModuleVersion"  = "0.0.6"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (7 unchanged attributes hidden)

      ~ private_dns_zone_group {
            id                   = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/privateEndpoints/io-p-itn-platform-sbns-pep-01/privateDnsZoneGroups/private-dns-zone-group"
            name                 = "private-dns-zone-group"
          ~ private_dns_zone_ids = [
              - "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-evt-rg/providers/Microsoft.Network/privateDnsZones/privatelink.servicebus.windows.net",
            ] -> (known after apply)
        }

        # (1 unchanged block hidden)
    }

Plan: 28 to add, 9 to change, 1 to destroy.

Warning: Argument is deprecated

  with module.apim_itn.module.apim.azurerm_api_management.this,
  on .terraform/modules/apim_itn.apim/main.tf line 18, in resource "azurerm_api_management" "this":
  18: resource "azurerm_api_management" "this" {

`key_vault_id` has been deprecated in favour of `key_vault_certificate_id`
and will be removed in v5.0 of the AzureRM provider

(and 23 more similar warnings elsewhere)
::error::Terraform exited with code 1.

pasqualedevita

I think that we should create a new log analytics in IT and wait a grace period for 90days logs in the old WEU log analytics.

Query can be done in both log analytics but you need to update dashboards, alarms and so on.

New log analytics in IT will be linked to a centralized log analytics cluster when we'll reach at least 100GB/day on all log analytics in IT. This operation will be made by cloud strategy team in background without any change in IO infrastructure

pasqualedevita · 2025-10-13T14:07:50Z

src/common/_modules/monitoring/locals.tf

+
+    itn = {
+
+      log  = "${var.project}-law-common"


@Krusty93 if I remember this make an override on new naming convention, right?

Exactly
@ansmatbitrock resource names are taken from var.project.
The computed names can be something like io-p-itn-<appname>-appi-01 and io-p-itn-<appname>-log-01, where appname is platform/common, etc.

sonarqubecloud · 2025-10-16T14:18:47Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

github-actions · 2025-10-16T14:19:56Z

Tip

✅ All Terraform module locks are up to date

No module changes detected - everything is in sync!

📋 Pre-commit Output Log

[INFO] Initializing environment for https://github.com/pagopa/dx.
[INFO] Initializing environment for https://github.com/antonbabenko/pre-commit-terraform.
Lock Terraform Registry modules..........................................Passed

_{Generated on Thu Oct 16 14:19:54 UTC 2025
Run lock_modules on folder: src/common/prod/}

github-actions · 2025-10-16T14:20:14Z

Tip

✅ All Terraform module locks are up to date

No module changes detected - everything is in sync!

📋 Pre-commit Output Log

[INFO] Initializing environment for https://github.com/pagopa/dx.
[INFO] Initializing environment for https://github.com/antonbabenko/pre-commit-terraform.
Lock Terraform Registry modules..........................................Passed

_{Generated on Thu Oct 16 14:20:12 UTC 2025
Run lock_modules on folder: src/common/dev/}

github-actions · 2025-10-16T14:20:47Z

Tip

✅ All Terraform module locks are up to date

No module changes detected - everything is in sync!

📋 Pre-commit Output Log

[INFO] Initializing environment for https://github.com/pagopa/dx.
[INFO] Initializing environment for https://github.com/antonbabenko/pre-commit-terraform.
Terraform Providers Lock (on staged .terraform.lock.hcl files).......................Passed
- hook id: terraform_providers_lock_staged
- duration: 0.03s

No .terraform.lock.hcl files to process.

Lock Terraform Registry modules......................................................Passed
Terraform validate with tflint.......................................................Passed
Terraform fmt........................................................................Passed
terraform_docs on resources..........................................................Passed
Terraform validate...................................................................Passed
Terraform validate with trivy........................................................Passed

_{Generated on Thu Oct 16 14:20:45 UTC 2025
Run all checks on modified files}

github-actions · 2025-10-16T14:21:25Z

📖 Terraform Plan (src/common/dev) - success

Show Plan

No changes detected.

github-actions · 2025-10-16T14:25:54Z

📖 Terraform Plan (src/common/prod) - failure

Show Plan

Terraform plan execution failed. Check the workflow logs for full details.

first commit

32a16a8

ansmatbitrock had a problem deploying to prod-ci September 24, 2025 07:40 — with GitHub Actions Failure

Merge branch 'main' into IOPLT-1215-italynorth-monitoring-migration

0aa5039

ansmatbitrock had a problem deploying to prod-ci September 25, 2025 14:11 — with GitHub Actions Failure

update module locks

78af180

ansmatbitrock had a problem deploying to prod-ci September 25, 2025 14:26 — with GitHub Actions Failure

fix kv reference

399b980

ansmatbitrock had a problem deploying to prod-ci September 25, 2025 14:35 — with GitHub Actions Failure

fix kv reference

8134836

ansmatbitrock had a problem deploying to prod-ci September 25, 2025 14:41 — with GitHub Actions Failure

add kv output

845ae87

ansmatbitrock had a problem deploying to prod-ci September 25, 2025 14:53 — with GitHub Actions Failure

github-actions bot added the core label Sep 25, 2025

ansmatbitrock temporarily deployed to prod-ci September 25, 2025 14:54 — with GitHub Actions Inactive

ansmatbitrock added 3 commits September 26, 2025 09:47

Merge branch 'main' into IOPLT-1215-italynorth-monitoring-migration

b2c25eb

Merge branch 'main' into IOPLT-1215-italynorth-monitoring-migration

e741ef7

fix kv output

4c69d91

ansmatbitrock had a problem deploying to prod-ci September 26, 2025 07:52 — with GitHub Actions Failure

remove already defined output

032c52f

ansmatbitrock had a problem deploying to prod-ci September 26, 2025 07:56 — with GitHub Actions Failure

github-actions bot removed the core label Sep 26, 2025

ansmatbitrock had a problem deploying to prod-ci September 30, 2025 13:13 — with GitHub Actions Failure

fix location and resource group locals

e07ed9c

ansmatbitrock had a problem deploying to prod-ci September 30, 2025 13:44 — with GitHub Actions Failure

Merge branch 'main' into IOPLT-1215-italynorth-monitoring-migration

a8f5957

ansmatbitrock had a problem deploying to prod-ci September 30, 2025 13:46 — with GitHub Actions Failure

fix tfdocs

dcc0f5f

ansmatbitrock had a problem deploying to prod-ci September 30, 2025 14:10 — with GitHub Actions Failure

add locals for itn

e444e3d

ansmatbitrock temporarily deployed to dev-ci September 30, 2025 14:40 — with GitHub Actions Inactive

ansmatbitrock temporarily deployed to prod-ci September 30, 2025 14:40 — with GitHub Actions Inactive

ansmatbitrock marked this pull request as ready for review October 1, 2025 07:30

ansmatbitrock requested review from a team as code owners October 1, 2025 07:30

ansmatbitrock temporarily deployed to dev-ci October 1, 2025 07:31 — with GitHub Actions Inactive

ansmatbitrock temporarily deployed to prod-ci October 1, 2025 07:31 — with GitHub Actions Inactive

pasqualedevita reviewed Oct 13, 2025

View reviewed changes

ansmatbitrock and others added 3 commits October 16, 2025 16:10

fix naming convention

a977910

Merge branch 'main' into IOPLT-1215-italynorth-monitoring-migration

9c67bd0

Merge branch 'main' into IOPLT-1215-italynorth-monitoring-migration

ba0b85d

ansmatbitrock had a problem deploying to prod-ci October 16, 2025 14:19 — with GitHub Actions Failure

Italy North Migration - Create new monitoring infrastructure #1653

Are you sure you want to change the base?

Italy North Migration - Create new monitoring infrastructure #1653

Uh oh!

Conversation

ansmatbitrock commented Sep 24, 2025

Uh oh!

github-actions bot commented Sep 25, 2025

📖 Terraform Plan (src/core/prod) - success

Uh oh!

github-actions bot commented Sep 26, 2025

Uh oh!

github-actions bot commented Sep 30, 2025

📖 Terraform Plan ('src/common/prod') - failure

Uh oh!

pasqualedevita left a comment

Choose a reason for hiding this comment

Uh oh!

pasqualedevita Oct 13, 2025

Choose a reason for hiding this comment

Uh oh!

Krusty93 Oct 16, 2025

Choose a reason for hiding this comment

Uh oh!

sonarqubecloud bot commented Oct 16, 2025

Quality Gate passed

Uh oh!

github-actions bot commented Oct 16, 2025

✅ All Terraform module locks are up to date

Uh oh!

github-actions bot commented Oct 16, 2025

✅ All Terraform module locks are up to date

Uh oh!

github-actions bot commented Oct 16, 2025

✅ All Terraform module locks are up to date

Uh oh!

github-actions bot commented Oct 16, 2025

📖 Terraform Plan (src/common/dev) - success

Uh oh!

github-actions bot commented Oct 16, 2025

📖 Terraform Plan (src/common/prod) - failure

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants