Italy North Migration - Create new storage accounts #1673
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
|
@BurnedMarshal question: you wanted to enable encryption for some storage accounts correct? which of them? |
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
|
ansmatbitrock
had a problem deploying
to
prod-ci
GitHub Actions
Failure
|
Tip ✅ All Terraform module locks are up to dateNo module changes detected - everything is in sync! 📋 Pre-commit Output LogGenerated on Mon Oct 13 13:32:43 UTC 2025 |
|
Tip ✅ All Terraform module locks are up to dateNo module changes detected - everything is in sync! 📋 Pre-commit Output LogGenerated on Mon Oct 13 13:32:58 UTC 2025 |
|
Tip ✅ All Terraform module locks are up to dateNo module changes detected - everything is in sync! 📋 Pre-commit Output LogGenerated on Mon Oct 13 13:33:04 UTC 2025 |
📖 Terraform Plan (src/common/dev) - successShow PlanNo changes detected. |
📖 Terraform Plan (src/common/prod) - successShow Plan # module.application_gateway_itn.azurerm_web_application_firewall_policy.agw will be updated in-place
~ resource "azurerm_web_application_firewall_policy" "agw" {
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/io-p-itn-agw-waf-01"
name = "io-p-itn-agw-waf-01"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
}
# (4 unchanged attributes hidden)
~ policy_settings {
~ request_body_enforcement = false -> true
~ request_body_inspect_limit_in_kb = 0 -> 128
# (7 unchanged attributes hidden)
}
# (1 unchanged block hidden)
}
# module.application_gateway_itn.azurerm_web_application_firewall_policy.app will be updated in-place
~ resource "azurerm_web_application_firewall_policy" "app" {
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/io-p-itn-agw-api-app-waf-01"
name = "io-p-itn-agw-api-app-waf-01"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
}
# (4 unchanged attributes hidden)
~ policy_settings {
~ request_body_enforcement = false -> true
~ request_body_inspect_limit_in_kb = 0 -> 128
# (7 unchanged attributes hidden)
}
# (1 unchanged block hidden)
}
# module.application_gateway_weu.azurerm_web_application_firewall_policy.api_app will be updated in-place
~ resource "azurerm_web_application_firewall_policy" "api_app" {
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-external/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/io-p-waf-appgateway-api-app-policy"
name = "io-p-waf-appgateway-api-app-policy"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
}
# (4 unchanged attributes hidden)
~ policy_settings {
~ request_body_enforcement = false -> true
~ request_body_inspect_limit_in_kb = 0 -> 128
# (7 unchanged attributes hidden)
}
# (1 unchanged block hidden)
}
# module.storage_accounts_itn.azurerm_storage_account.iopitnstcdnassets[0] will be created
+ resource "azurerm_storage_account" "iopitnstcdnassets" {
+ access_tier = (known after apply)
+ account_kind = "StorageV2"
+ account_replication_type = "ZRS"
+ account_tier = "Standard"
+ allow_nested_items_to_be_public = true
+ cross_tenant_replication_enabled = true
+ default_to_oauth_authentication = false
+ dns_endpoint_type = "Standard"
+ https_traffic_only_enabled = true
+ id = (known after apply)
+ infrastructure_encryption_enabled = false
+ is_hns_enabled = false
+ large_file_share_enabled = true
+ local_user_enabled = true
+ location = "italynorth"
+ min_tls_version = "TLS1_2"
+ name = "iopitnstcdnassets"
+ nfsv3_enabled = false
+ primary_access_key = (sensitive value)
+ primary_blob_connection_string = (sensitive value)
+ primary_blob_endpoint = (known after apply)
+ primary_blob_host = (known after apply)
+ primary_blob_internet_endpoint = (known after apply)
+ primary_blob_internet_host = (known after apply)
+ primary_blob_microsoft_endpoint = (known after apply)
+ primary_blob_microsoft_host = (known after apply)
+ primary_connection_string = (sensitive value)
+ primary_dfs_endpoint = (known after apply)
+ primary_dfs_host = (known after apply)
+ primary_dfs_internet_endpoint = (known after apply)
+ primary_dfs_internet_host = (known after apply)
+ primary_dfs_microsoft_endpoint = (known after apply)
+ primary_dfs_microsoft_host = (known after apply)
+ primary_file_endpoint = (known after apply)
+ primary_file_host = (known after apply)
+ primary_file_internet_endpoint = (known after apply)
+ primary_file_internet_host = (known after apply)
+ primary_file_microsoft_endpoint = (known after apply)
+ primary_file_microsoft_host = (known after apply)
+ primary_location = (known after apply)
+ primary_queue_endpoint = (known after apply)
+ primary_queue_host = (known after apply)
+ primary_queue_microsoft_endpoint = (known after apply)
+ primary_queue_microsoft_host = (known after apply)
+ primary_table_endpoint = (known after apply)
+ primary_table_host = (known after apply)
+ primary_table_microsoft_endpoint = (known after apply)
+ primary_table_microsoft_host = (known after apply)
+ primary_web_endpoint = (known after apply)
+ primary_web_host = (known after apply)
+ primary_web_internet_endpoint = (known after apply)
+ primary_web_internet_host = (known after apply)
+ primary_web_microsoft_endpoint = (known after apply)
+ primary_web_microsoft_host = (known after apply)
+ public_network_access_enabled = true
+ queue_encryption_key_type = "Service"
+ resource_group_name = "io-p-rg-operations"
+ secondary_access_key = (sensitive value)
+ secondary_blob_connection_string = (sensitive value)
+ secondary_blob_endpoint = (known after apply)
+ secondary_blob_host = (known after apply)
+ secondary_blob_internet_endpoint = (known after apply)
+ secondary_blob_internet_host = (known after apply)
+ secondary_blob_microsoft_endpoint = (known after apply)
+ secondary_blob_microsoft_host = (known after apply)
+ secondary_connection_string = (sensitive value)
+ secondary_dfs_endpoint = (known after apply)
+ secondary_dfs_host = (known after apply)
+ secondary_dfs_internet_endpoint = (known after apply)
+ secondary_dfs_internet_host = (known after apply)
+ secondary_dfs_microsoft_endpoint = (known after apply)
+ secondary_dfs_microsoft_host = (known after apply)
+ secondary_file_endpoint = (known after apply)
+ secondary_file_host = (known after apply)
+ secondary_file_internet_endpoint = (known after apply)
+ secondary_file_internet_host = (known after apply)
+ secondary_file_microsoft_endpoint = (known after apply)
+ secondary_file_microsoft_host = (known after apply)
+ secondary_location = (known after apply)
+ secondary_queue_endpoint = (known after apply)
+ secondary_queue_host = (known after apply)
+ secondary_queue_microsoft_endpoint = (known after apply)
+ secondary_queue_microsoft_host = (known after apply)
+ secondary_table_endpoint = (known after apply)
+ secondary_table_host = (known after apply)
+ secondary_table_microsoft_endpoint = (known after apply)
+ secondary_table_microsoft_host = (known after apply)
+ secondary_web_endpoint = (known after apply)
+ secondary_web_host = (known after apply)
+ secondary_web_internet_endpoint = (known after apply)
+ secondary_web_internet_host = (known after apply)
+ secondary_web_microsoft_endpoint = (known after apply)
+ secondary_web_microsoft_host = (known after apply)
+ sftp_enabled = false
+ shared_access_key_enabled = true
+ table_encryption_key_type = "Service"
+ tags = {
+ "BusinessUnit" = "App IO"
+ "CostCenter" = "TS000 - Tecnologia e Servizi"
+ "CreatedBy" = "Terraform"
+ "Environment" = "Prod"
+ "ManagementTeam" = "IO Platform"
+ "Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
}
+ blob_properties {
+ change_feed_enabled = false
+ default_service_version = (known after apply)
+ last_access_time_enabled = false
+ versioning_enabled = true
}
+ network_rules (known after apply)
+ queue_properties (known after apply)
+ routing (known after apply)
+ share_properties (known after apply)
+ static_website (known after apply)
}
# module.storage_accounts_itn.azurerm_storage_account.iopitnstexportdata[0] will be created
+ resource "azurerm_storage_account" "iopitnstexportdata" {
+ access_tier = (known after apply)
+ account_kind = "StorageV2"
+ account_replication_type = "ZRS"
+ account_tier = "Standard"
+ allow_nested_items_to_be_public = false
+ cross_tenant_replication_enabled = true
+ default_to_oauth_authentication = false
+ dns_endpoint_type = "Standard"
+ https_traffic_only_enabled = true
+ id = (known after apply)
+ infrastructure_encryption_enabled = false
+ is_hns_enabled = false
+ large_file_share_enabled = (known after apply)
+ local_user_enabled = true
+ location = "italynorth"
+ min_tls_version = "TLS1_2"
+ name = "iopitnstexportdata"
+ nfsv3_enabled = false
+ primary_access_key = (sensitive value)
+ primary_blob_connection_string = (sensitive value)
+ primary_blob_endpoint = (known after apply)
+ primary_blob_host = (known after apply)
+ primary_blob_internet_endpoint = (known after apply)
+ primary_blob_internet_host = (known after apply)
+ primary_blob_microsoft_endpoint = (known after apply)
+ primary_blob_microsoft_host = (known after apply)
+ primary_connection_string = (sensitive value)
+ primary_dfs_endpoint = (known after apply)
+ primary_dfs_host = (known after apply)
+ primary_dfs_internet_endpoint = (known after apply)
+ primary_dfs_internet_host = (known after apply)
+ primary_dfs_microsoft_endpoint = (known after apply)
+ primary_dfs_microsoft_host = (known after apply)
+ primary_file_endpoint = (known after apply)
+ primary_file_host = (known after apply)
+ primary_file_internet_endpoint = (known after apply)
+ primary_file_internet_host = (known after apply)
+ primary_file_microsoft_endpoint = (known after apply)
+ primary_file_microsoft_host = (known after apply)
+ primary_location = (known after apply)
+ primary_queue_endpoint = (known after apply)
+ primary_queue_host = (known after apply)
+ primary_queue_microsoft_endpoint = (known after apply)
+ primary_queue_microsoft_host = (known after apply)
+ primary_table_endpoint = (known after apply)
+ primary_table_host = (known after apply)
+ primary_table_microsoft_endpoint = (known after apply)
+ primary_table_microsoft_host = (known after apply)
+ primary_web_endpoint = (known after apply)
+ primary_web_host = (known after apply)
+ primary_web_internet_endpoint = (known after apply)
+ primary_web_internet_host = (known after apply)
+ primary_web_microsoft_endpoint = (known after apply)
+ primary_web_microsoft_host = (known after apply)
+ public_network_access_enabled = true
+ queue_encryption_key_type = "Service"
+ resource_group_name = "io-p-rg-operations"
+ secondary_access_key = (sensitive value)
+ secondary_blob_connection_string = (sensitive value)
+ secondary_blob_endpoint = (known after apply)
+ secondary_blob_host = (known after apply)
+ secondary_blob_internet_endpoint = (known after apply)
+ secondary_blob_internet_host = (known after apply)
+ secondary_blob_microsoft_endpoint = (known after apply)
+ secondary_blob_microsoft_host = (known after apply)
+ secondary_connection_string = (sensitive value)
+ secondary_dfs_endpoint = (known after apply)
+ secondary_dfs_host = (known after apply)
+ secondary_dfs_internet_endpoint = (known after apply)
+ secondary_dfs_internet_host = (known after apply)
+ secondary_dfs_microsoft_endpoint = (known after apply)
+ secondary_dfs_microsoft_host = (known after apply)
+ secondary_file_endpoint = (known after apply)
+ secondary_file_host = (known after apply)
+ secondary_file_internet_endpoint = (known after apply)
+ secondary_file_internet_host = (known after apply)
+ secondary_file_microsoft_endpoint = (known after apply)
+ secondary_file_microsoft_host = (known after apply)
+ secondary_location = (known after apply)
+ secondary_queue_endpoint = (known after apply)
+ secondary_queue_host = (known after apply)
+ secondary_queue_microsoft_endpoint = (known after apply)
+ secondary_queue_microsoft_host = (known after apply)
+ secondary_table_endpoint = (known after apply)
+ secondary_table_host = (known after apply)
+ secondary_table_microsoft_endpoint = (known after apply)
+ secondary_table_microsoft_host = (known after apply)
+ secondary_web_endpoint = (known after apply)
+ secondary_web_host = (known after apply)
+ secondary_web_internet_endpoint = (known after apply)
+ secondary_web_internet_host = (known after apply)
+ secondary_web_microsoft_endpoint = (known after apply)
+ secondary_web_microsoft_host = (known after apply)
+ sftp_enabled = false
+ shared_access_key_enabled = true
+ table_encryption_key_type = "Service"
+ tags = {
+ "BusinessUnit" = "App IO"
+ "CostCenter" = "TS000 - Tecnologia e Servizi"
+ "CreatedBy" = "Terraform"
+ "Environment" = "Prod"
+ "ManagementTeam" = "IO Platform"
+ "Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
}
+ blob_properties (known after apply)
+ network_rules (known after apply)
+ queue_properties (known after apply)
+ routing (known after apply)
+ share_properties (known after apply)
+ static_website (known after apply)
}
# module.storage_accounts_itn.azurerm_storage_account.iopitnstlogs[0] will be created
+ resource "azurerm_storage_account" "iopitnstlogs" {
+ access_tier = (known after apply)
+ account_kind = "StorageV2"
+ account_replication_type = "ZRS"
+ account_tier = "Standard"
+ allow_nested_items_to_be_public = true
+ cross_tenant_replication_enabled = true
+ default_to_oauth_authentication = false
+ dns_endpoint_type = "Standard"
+ https_traffic_only_enabled = true
+ id = (known after apply)
+ infrastructure_encryption_enabled = false
+ is_hns_enabled = false
+ large_file_share_enabled = true
+ local_user_enabled = true
+ location = "italynorth"
+ min_tls_version = "TLS1_2"
+ name = "iopitnstlogs"
+ nfsv3_enabled = false
+ primary_access_key = (sensitive value)
+ primary_blob_connection_string = (sensitive value)
+ primary_blob_endpoint = (known after apply)
+ primary_blob_host = (known after apply)
+ primary_blob_internet_endpoint = (known after apply)
+ primary_blob_internet_host = (known after apply)
+ primary_blob_microsoft_endpoint = (known after apply)
+ primary_blob_microsoft_host = (known after apply)
+ primary_connection_string = (sensitive value)
+ primary_dfs_endpoint = (known after apply)
+ primary_dfs_host = (known after apply)
+ primary_dfs_internet_endpoint = (known after apply)
+ primary_dfs_internet_host = (known after apply)
+ primary_dfs_microsoft_endpoint = (known after apply)
+ primary_dfs_microsoft_host = (known after apply)
+ primary_file_endpoint = (known after apply)
+ primary_file_host = (known after apply)
+ primary_file_internet_endpoint = (known after apply)
+ primary_file_internet_host = (known after apply)
+ primary_file_microsoft_endpoint = (known after apply)
+ primary_file_microsoft_host = (known after apply)
+ primary_location = (known after apply)
+ primary_queue_endpoint = (known after apply)
+ primary_queue_host = (known after apply)
+ primary_queue_microsoft_endpoint = (known after apply)
+ primary_queue_microsoft_host = (known after apply)
+ primary_table_endpoint = (known after apply)
+ primary_table_host = (known after apply)
+ primary_table_microsoft_endpoint = (known after apply)
+ primary_table_microsoft_host = (known after apply)
+ primary_web_endpoint = (known after apply)
+ primary_web_host = (known after apply)
+ primary_web_internet_endpoint = (known after apply)
+ primary_web_internet_host = (known after apply)
+ primary_web_microsoft_endpoint = (known after apply)
+ primary_web_microsoft_host = (known after apply)
+ public_network_access_enabled = true
+ queue_encryption_key_type = "Service"
+ resource_group_name = "io-p-rg-operations"
+ secondary_access_key = (sensitive value)
+ secondary_blob_connection_string = (sensitive value)
+ secondary_blob_endpoint = (known after apply)
+ secondary_blob_host = (known after apply)
+ secondary_blob_internet_endpoint = (known after apply)
+ secondary_blob_internet_host = (known after apply)
+ secondary_blob_microsoft_endpoint = (known after apply)
+ secondary_blob_microsoft_host = (known after apply)
+ secondary_connection_string = (sensitive value)
+ secondary_dfs_endpoint = (known after apply)
+ secondary_dfs_host = (known after apply)
+ secondary_dfs_internet_endpoint = (known after apply)
+ secondary_dfs_internet_host = (known after apply)
+ secondary_dfs_microsoft_endpoint = (known after apply)
+ secondary_dfs_microsoft_host = (known after apply)
+ secondary_file_endpoint = (known after apply)
+ secondary_file_host = (known after apply)
+ secondary_file_internet_endpoint = (known after apply)
+ secondary_file_internet_host = (known after apply)
+ secondary_file_microsoft_endpoint = (known after apply)
+ secondary_file_microsoft_host = (known after apply)
+ secondary_location = (known after apply)
+ secondary_queue_endpoint = (known after apply)
+ secondary_queue_host = (known after apply)
+ secondary_queue_microsoft_endpoint = (known after apply)
+ secondary_queue_microsoft_host = (known after apply)
+ secondary_table_endpoint = (known after apply)
+ secondary_table_host = (known after apply)
+ secondary_table_microsoft_endpoint = (known after apply)
+ secondary_table_microsoft_host = (known after apply)
+ secondary_web_endpoint = (known after apply)
+ secondary_web_host = (known after apply)
+ secondary_web_internet_endpoint = (known after apply)
+ secondary_web_internet_host = (known after apply)
+ secondary_web_microsoft_endpoint = (known after apply)
+ secondary_web_microsoft_host = (known after apply)
+ sftp_enabled = false
+ shared_access_key_enabled = true
+ table_encryption_key_type = "Service"
+ tags = {
+ "BusinessUnit" = "App IO"
+ "CostCenter" = "TS000 - Tecnologia e Servizi"
+ "CreatedBy" = "Terraform"
+ "Environment" = "Prod"
+ "ManagementTeam" = "IO Platform"
+ "Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
}
+ blob_properties {
+ change_feed_enabled = true
+ default_service_version = (known after apply)
+ last_access_time_enabled = false
+ versioning_enabled = true
}
+ network_rules (known after apply)
+ queue_properties (known after apply)
+ routing (known after apply)
+ share_properties (known after apply)
+ static_website (known after apply)
}
# module.app_backend_weu["1"].module.appservice_app_backend.azurerm_linux_web_app.this will be updated in-place
~ resource "azurerm_linux_web_app" "this" {
~ app_settings = {
~ "SERVICES_APP_BACKEND_API_URL" = "https://io-p-itn-svc-app-be-func-02.ambitioussea-e5d71305.italynorth.azurecontainerapps.io" -> "https://io-p-itn-svc-app-be-func-01.azurewebsites.net"
# (122 unchanged elements hidden)
}
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-linux/providers/Microsoft.Web/sites/io-p-app-appbackendl1"
name = "io-p-app-appbackendl1"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
"hidden-link: /app-insights-conn-string" = "InstrumentationKey=ab45103a-cb4f-474b-933f-d802ed1082d5;IngestionEndpoint=https://westeurope-3.in.applicationinsights.azure.com/;LiveEndpoint=https://westeurope.livediagnostics.monitor.azure.com/;ApplicationId=2a5ffa17-99f9-4d9b-a253-18dba6759d94"
"hidden-link: /app-insights-instrumentation-key" = "ab45103a-cb4f-474b-933f-d802ed1082d5"
"hidden-link: /app-insights-resource-id" = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-common/providers/microsoft.insights/components/io-p-ai-common"
}
# (26 unchanged attributes hidden)
# (3 unchanged blocks hidden)
}
# module.app_backend_weu["2"].module.appservice_app_backend.azurerm_linux_web_app.this will be updated in-place
~ resource "azurerm_linux_web_app" "this" {
~ app_settings = {
~ "SERVICES_APP_BACKEND_API_URL" = "https://io-p-itn-svc-app-be-func-02.ambitioussea-e5d71305.italynorth.azurecontainerapps.io" -> "https://io-p-itn-svc-app-be-func-01.azurewebsites.net"
# (122 unchanged elements hidden)
}
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-linux/providers/Microsoft.Web/sites/io-p-app-appbackendl2"
name = "io-p-app-appbackendl2"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
"hidden-link: /app-insights-conn-string" = "InstrumentationKey=ab45103a-cb4f-474b-933f-d802ed1082d5;IngestionEndpoint=https://westeurope-3.in.applicationinsights.azure.com/;LiveEndpoint=https://westeurope.livediagnostics.monitor.azure.com/;ApplicationId=2a5ffa17-99f9-4d9b-a253-18dba6759d94"
"hidden-link: /app-insights-instrumentation-key" = "ab45103a-cb4f-474b-933f-d802ed1082d5"
"hidden-link: /app-insights-resource-id" = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-common/providers/microsoft.insights/components/io-p-ai-common"
}
# (26 unchanged attributes hidden)
# (3 unchanged blocks hidden)
}
# module.app_backend_weu["3"].module.appservice_app_backend.azurerm_linux_web_app.this will be updated in-place
~ resource "azurerm_linux_web_app" "this" {
~ app_settings = {
~ "SERVICES_APP_BACKEND_API_URL" = "https://io-p-itn-svc-app-be-func-02.ambitioussea-e5d71305.italynorth.azurecontainerapps.io" -> "https://io-p-itn-svc-app-be-func-01.azurewebsites.net"
# (122 unchanged elements hidden)
}
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-linux/providers/Microsoft.Web/sites/io-p-app-appbackendl3"
name = "io-p-app-appbackendl3"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
"hidden-link: /app-insights-resource-id" = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-common/providers/microsoft.insights/components/io-p-ai-common"
}
# (26 unchanged attributes hidden)
# (3 unchanged blocks hidden)
}
# module.function_app_admin.module.function_admin_itn.azurerm_monitor_metric_alert.function_app_health_check[0] will be updated in-place
~ resource "azurerm_monitor_metric_alert" "function_app_health_check" {
~ enabled = false -> true
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-platform-admin-rg-01/providers/Microsoft.Insights/metricAlerts/[io-p-itn-admin-func-01] Health Check Failed"
name = "[io-p-itn-admin-func-01] Health Check Failed"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"ModuleName" = "azure_function_app"
"ModuleSource" = "DX"
"ModuleVersion" = "3.0.0"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
}
# (9 unchanged attributes hidden)
# (2 unchanged blocks hidden)
}
# module.function_app_admin.module.user_data_backups_storage_account.azurerm_key_vault_key.key["kv"] will be created
+ resource "azurerm_key_vault_key" "key" {
+ curve = (known after apply)
+ e = (known after apply)
+ id = (known after apply)
+ key_opts = [
+ "decrypt",
+ "encrypt",
+ "sign",
+ "unwrapKey",
+ "verify",
+ "wrapKey",
]
+ key_size = 4096
+ key_type = "RSA"
+ key_vault_id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.KeyVault/vaults/io-p-itn-platform-kv-01"
+ n = (known after apply)
+ name = "iopitnuserbackupsstcmk01"
+ public_key_openssh = (known after apply)
+ public_key_pem = (known after apply)
+ resource_id = (known after apply)
+ resource_versionless_id = (known after apply)
+ version = (known after apply)
+ versionless_id = (known after apply)
+ x = (known after apply)
+ y = (known after apply)
}
# module.function_app_admin.module.user_data_backups_storage_account.azurerm_storage_account_customer_managed_key.kv["kv"] will be created
+ resource "azurerm_storage_account_customer_managed_key" "kv" {
+ id = (known after apply)
+ key_name = "iopitnuserbackupsstcmk01"
+ key_vault_id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.KeyVault/vaults/io-p-itn-platform-kv-01"
+ key_vault_uri = (known after apply)
+ storage_account_id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-platform-admin-rg-01/providers/Microsoft.Storage/storageAccounts/iopitnuserbackupsst01"
}
# module.function_app_services.module.function_services_dx.azurerm_linux_function_app.this will be updated in-place
~ resource "azurerm_linux_function_app" "this" {
~ app_settings = {
+ "APPINSIGHTS_INSTRUMENTATIONKEY" = "[REDACTED]"
# (61 unchanged elements hidden)
}
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-funcsvc-rg-01/providers/Microsoft.Web/sites/io-p-itn-funcsvc-func-01"
name = "io-p-itn-funcsvc-func-01"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"ModuleName" = "azure_function_app"
"ModuleSource" = "DX"
"ModuleVersion" = "2.0.2"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
"hidden-link: /app-insights-resource-id" = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-common/providers/microsoft.insights/components/io-p-ai-common"
}
# (33 unchanged attributes hidden)
# (3 unchanged blocks hidden)
}
# module.function_app_services.module.function_services_dx.azurerm_linux_function_app_slot.this[0] will be updated in-place
~ resource "azurerm_linux_function_app_slot" "this" {
~ app_settings = {
+ "APPINSIGHTS_INSTRUMENTATIONKEY" = "[REDACTED]"
# (61 unchanged elements hidden)
}
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-funcsvc-rg-01/providers/Microsoft.Web/sites/io-p-itn-funcsvc-func-01/slots/staging"
name = "staging"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"ModuleName" = "azure_function_app"
"ModuleSource" = "DX"
"ModuleVersion" = "2.0.2"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
}
# (31 unchanged attributes hidden)
~ site_config {
- application_insights_key = (sensitive value) -> null
~ health_check_eviction_time_in_min = 0 -> 2
# (32 unchanged attributes hidden)
# (1 unchanged block hidden)
}
# (1 unchanged block hidden)
}
# module.platform_api_gateway_apim_itn.module.platform_api_gateway.azurerm_api_management.this will be updated in-place
~ resource "azurerm_api_management" "this" {
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.ApiManagement/service/io-p-itn-platform-api-gateway-apim-01"
name = "io-p-itn-platform-api-gateway-apim-01"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"ModuleName" = "azure_api_management"
"ModuleSource" = "DX"
"ModuleVersion" = "1.2.2"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
}
# (21 unchanged attributes hidden)
~ hostname_configuration {
~ proxy {
~ default_ssl_binding = true -> false
# (12 unchanged attributes hidden)
}
# (1 unchanged block hidden)
}
# (8 unchanged blocks hidden)
}
# module.platform_service_bus_namespace_itn.module.platform_service_bus_namespace.data.azurerm_private_dns_zone.this[0] will be read during apply
# (depends on a resource or a module with changes pending)
<= data "azurerm_private_dns_zone" "this" {
+ id = (known after apply)
+ max_number_of_record_sets = (known after apply)
+ max_number_of_virtual_network_links = (known after apply)
+ max_number_of_virtual_network_links_with_registration = (known after apply)
+ name = "privatelink.servicebus.windows.net"
+ number_of_record_sets = (known after apply)
+ resource_group_name = "io-p-evt-rg"
}
# module.platform_service_bus_namespace_itn.module.platform_service_bus_namespace.azurerm_private_endpoint.service_bus_pep[0] will be updated in-place
~ resource "azurerm_private_endpoint" "service_bus_pep" {
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/privateEndpoints/io-p-itn-platform-sbns-pep-01"
name = "io-p-itn-platform-sbns-pep-01"
tags = {
"BusinessUnit" = "App IO"
"CostCenter" = "TS000 - Tecnologia e Servizi"
"CreatedBy" = "Terraform"
"Environment" = "Prod"
"ManagementTeam" = "IO Platform"
"ModuleName" = "azure_service_bus_namespace"
"ModuleSource" = "DX"
"ModuleVersion" = "0.0.6"
"Source" = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
}
# (7 unchanged attributes hidden)
~ private_dns_zone_group {
id = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/privateEndpoints/io-p-itn-platform-sbns-pep-01/privateDnsZoneGroups/private-dns-zone-group"
name = "private-dns-zone-group"
~ private_dns_zone_ids = [
- "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-evt-rg/providers/Microsoft.Network/privateDnsZones/privatelink.servicebus.windows.net",
] -> (known after apply)
}
# (1 unchanged block hidden)
}
Plan: 5 to add, 11 to change, 0 to destroy.
Warning: Argument is deprecated
with module.apim_itn.module.apim.azurerm_api_management.this,
on .terraform/modules/apim_itn.apim/main.tf line 18, in resource "azurerm_api_management" "this":
18: resource "azurerm_api_management" "this" {
`key_vault_id` has been deprecated in favour of `key_vault_certificate_id`
and will be removed in v5.0 of the AzureRM provider
(and 23 more similar warnings elsewhere) |
Krusty93
reviewed
Oct 16, 2025
|
|
||
| count = var.location == "italynorth" ? 1 : 0 | ||
|
|
||
| name = replace("${var.project}stexportdata", "-", "") |
There was a problem hiding this comment.
issue: Other than the convention, can be proposed a better name than exportdata?
Krusty93
reviewed
Oct 16, 2025
|
|
||
| count = var.location == "italynorth" ? 1 : 0 | ||
|
|
||
| name = replace("${var.project}stlogs", "-", "") |
Krusty93
reviewed
Oct 16, 2025
|
|
||
| count = var.location == "italynorth" ? 1 : 0 | ||
|
|
||
| name = replace("${var.project}stcdnassets", "-", "") |
Krusty93
reviewed
Oct 16, 2025
| @@ -0,0 +1,20 @@ | |||
| resource "azurerm_storage_account" "iopitniowebportalsa" { | |||
|
|
|||
| name = replace("${local.project_itn}iowebportalsa", "-", "") | |||
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Create new storage accounts in ITN for the following resources: