Add IO-COM app gateway path rule #1675

lucamancosu · 2025-10-15T10:33:02Z

No description provided.

… plan change

sonarqubecloud · 2025-10-16T14:48:17Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

github-actions · 2025-10-16T14:48:41Z

📋 Pre-commit Output Log

[INFO] Initializing environment for https://github.com/pagopa/dx.
[INFO] Initializing environment for https://github.com/antonbabenko/pre-commit-terraform.
Terraform Providers Lock (on staged .terraform.lock.hcl files).......................Passed
- hook id: terraform_providers_lock_staged
- duration: 0.02s

No .terraform.lock.hcl files to process.

Lock Terraform Registry modules..................................(no files to check)Skipped
Terraform validate with tflint.......................................................Passed
Terraform fmt........................................................................Passed
terraform_docs on resources......................................(no files to check)Skipped
Terraform validate...............................................(no files to check)Skipped
Terraform validate with trivy........................................................Passed

_{Generated on Thu Oct 16 14:48:39 UTC 2025
Run all checks on modified files}

github-actions · 2025-10-16T14:48:48Z

Tip

✅ All Terraform module locks are up to date

No module changes detected - everything is in sync!

📋 Pre-commit Output Log

[INFO] Initializing environment for https://github.com/pagopa/dx.
[INFO] Initializing environment for https://github.com/antonbabenko/pre-commit-terraform.
Lock Terraform Registry modules..........................................Passed

_{Generated on Thu Oct 16 14:48:47 UTC 2025
Run lock_modules on folder: src/common/dev/}

github-actions · 2025-10-16T14:49:01Z

Tip

✅ All Terraform module locks are up to date

No module changes detected - everything is in sync!

📋 Pre-commit Output Log

[INFO] Initializing environment for https://github.com/pagopa/dx.
[INFO] Initializing environment for https://github.com/antonbabenko/pre-commit-terraform.
Lock Terraform Registry modules..........................................Passed

_{Generated on Thu Oct 16 14:48:59 UTC 2025
Run lock_modules on folder: src/common/prod/}

github-actions · 2025-10-16T14:49:55Z

📖 Terraform Plan (src/common/dev) - success

Show Plan

No changes detected.

github-actions · 2025-10-16T14:54:17Z

📖 Terraform Plan (src/common/prod) - success

Show Plan

  # module.application_gateway_itn.azurerm_application_gateway.this will be updated in-place
  ~ resource "azurerm_application_gateway" "this" {
        id                                = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01"
        name                              = "io-p-itn-agw-01"
        tags                              = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (8 unchanged attributes hidden)

      ~ url_path_map {
            id                                  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map"
            name                                = "io-backend-path-based-rule-url-map"
            # (8 unchanged attributes hidden)

          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/api-gateway-platform-identity"
              ~ name                        = "api-gateway-platform-identity" -> "api-gateway-com"
              ~ paths                       = [
                  ~ "/api/identity/*" -> "/api/com/*",
                ]
                # (9 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/api-gateway-platform-info"
              ~ name                        = "api-gateway-platform-info" -> "api-gateway-platform-identity"
              ~ paths                       = [
                  ~ "/info" -> "/api/identity/*",
                ]
              ~ rewrite_rule_set_name       = "rewrite-rule-set-api-app-rewrite-platform-legacy-root" -> "rewrite-rule-set-api-app"
                # (8 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/api-gateway-platform-ping"
              ~ name                        = "api-gateway-platform-ping" -> "api-gateway-platform-info"
              ~ paths                       = [
                  ~ "/api/v1/ping" -> "/info",
                ]
              ~ rewrite_rule_set_name       = "rewrite-rule-set-api-app-rewrite-platform-legacy" -> "rewrite-rule-set-api-app-rewrite-platform-legacy-root"
                # (8 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/api-gateway-platform-status"
              ~ name                        = "api-gateway-platform-status" -> "api-gateway-platform-ping"
              ~ paths                       = [
                  ~ "/api/v1/status" -> "/api/v1/ping",
                ]
                # (9 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/api-gateway-platform-trials"
              ~ name                        = "api-gateway-platform-trials" -> "api-gateway-platform-status"
              ~ paths                       = [
                  ~ "/api/v1/trials/*" -> "/api/v1/status",
                ]
                # (9 unchanged attributes hidden)
            }
          ~ path_rule {
              ~ backend_address_pool_name   = "session-manager-app-address-pool" -> "platform-api-gateway-address-pool"
              ~ backend_http_settings_name  = "session-manager-app-http-settings" -> "platform-api-gateway-http-settings"
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/bpd-user"
              ~ name                        = "bpd-user" -> "api-gateway-platform-trials"
              ~ paths                       = [
                  ~ "/bpd/api/v1/user" -> "/api/v1/trials/*",
                ]
              ~ rewrite_rule_set_name       = "rewrite-rule-set-api-app-rewrite-to-bpd-session-manager" -> "rewrite-rule-set-api-app-rewrite-platform-legacy"
                # (6 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/fast-login"
              ~ name                        = "fast-login" -> "bpd-user"
              ~ paths                       = [
                  ~ "/api/v1/fast-login" -> "/bpd/api/v1/user",
                ]
              ~ rewrite_rule_set_name       = "rewrite-rule-set-api-app-rewrite-to-session-manager" -> "rewrite-rule-set-api-app-rewrite-to-bpd-session-manager"
                # (8 unchanged attributes hidden)
            }
          ~ path_rule {
              ~ backend_address_pool_name   = "appbackend-app-address-pool" -> "session-manager-app-address-pool"
              ~ backend_http_settings_name  = "appbackend-app-http-settings" -> "session-manager-app-http-settings"
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/healthcheck"
              ~ name                        = "healthcheck" -> "fast-login"
              ~ paths                       = [
                  ~ "/healthcheck" -> "/api/v1/fast-login",
                ]
                # (7 unchanged attributes hidden)
            }
          ~ path_rule {
              ~ backend_address_pool_name   = "session-manager-app-address-pool" -> "appbackend-app-address-pool"
              ~ backend_http_settings_name  = "session-manager-app-http-settings" -> "appbackend-app-http-settings"
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/login"
              ~ name                        = "login" -> "healthcheck"
              ~ paths                       = [
                  ~ "/login" -> "/healthcheck",
                ]
                # (7 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/logout"
              ~ name                        = "logout" -> "login"
              ~ paths                       = [
                  ~ "/logout" -> "/login",
                ]
                # (9 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/metadata"
              ~ name                        = "metadata" -> "logout"
              ~ paths                       = [
                  ~ "/metadata" -> "/logout",
                ]
                # (9 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/nonce-fast-login"
              ~ name                        = "nonce-fast-login" -> "metadata"
              ~ paths                       = [
                  ~ "/api/v1/fast-login/nonce/generate" -> "/metadata",
                ]
                # (9 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/pagopa-user"
              ~ name                        = "pagopa-user" -> "nonce-fast-login"
              ~ paths                       = [
                  ~ "/pagopa/api/v1/user" -> "/api/v1/fast-login/nonce/generate",
                ]
              ~ rewrite_rule_set_name       = "rewrite-rule-set-api-app-rewrite-to-pagopa-session-manager" -> "rewrite-rule-set-api-app-rewrite-to-session-manager"
                # (8 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/session"
              ~ name                        = "session" -> "pagopa-user"
              ~ paths                       = [
                  ~ "/api/v1/session" -> "/pagopa/api/v1/user",
                ]
              ~ rewrite_rule_set_name       = "rewrite-rule-set-api-app-rewrite-to-session-manager" -> "rewrite-rule-set-api-app-rewrite-to-pagopa-session-manager"
                # (8 unchanged attributes hidden)
            }
          ~ path_rule {
              ~ backend_address_pool_name   = "platform-api-gateway-address-pool" -> "session-manager-app-address-pool"
              ~ backend_http_settings_name  = "platform-api-gateway-http-settings" -> "session-manager-app-http-settings"
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/session-manager"
              ~ name                        = "session-manager" -> "session"
              ~ paths                       = [
                  - "/api/auth/v1/*",
                  - "/api/sso/bpd/v1/user",
                  - "/api/sso/pagopa/v1/user",
                  - "/api/sso/zendesk/v1/jwt",
                  + "/api/v1/session",
                ]
              ~ rewrite_rule_set_name       = "rewrite-rule-set-api-app" -> "rewrite-rule-set-api-app-rewrite-to-session-manager"
                # (6 unchanged attributes hidden)
            }
          ~ path_rule {
              ~ backend_address_pool_name   = "session-manager-app-address-pool" -> "platform-api-gateway-address-pool"
              ~ backend_http_settings_name  = "session-manager-app-http-settings" -> "platform-api-gateway-http-settings"
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/test-login"
              ~ name                        = "test-login" -> "session-manager"
              ~ paths                       = [
                  - "/test-login",
                  + "/api/auth/v1/*",
                  + "/api/sso/bpd/v1/user",
                  + "/api/sso/pagopa/v1/user",
                  + "/api/sso/zendesk/v1/jwt",
                ]
              ~ rewrite_rule_set_name       = "rewrite-rule-set-api-app-rewrite-to-session-manager" -> "rewrite-rule-set-api-app"
                # (6 unchanged attributes hidden)
            }
          ~ path_rule {
                id                          = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGateways/io-p-itn-agw-01/urlPathMaps/io-backend-path-based-rule-url-map/pathRules/zendesk-user"
              ~ name                        = "zendesk-user" -> "test-login"
              ~ paths                       = [
                  ~ "/api/backend/zendesk/v1/jwt" -> "/test-login",
                ]
              ~ rewrite_rule_set_name       = "rewrite-rule-set-api-app-rewrite-to-zendesk-session-manager" -> "rewrite-rule-set-api-app-rewrite-to-session-manager"
                # (8 unchanged attributes hidden)
            }
          + path_rule {
              + backend_address_pool_name  = "session-manager-app-address-pool"
              + backend_http_settings_name = "session-manager-app-http-settings"
              + name                       = "zendesk-user"
              + paths                      = [
                  + "/api/backend/zendesk/v1/jwt",
                ]
              + rewrite_rule_set_name      = "rewrite-rule-set-api-app-rewrite-to-zendesk-session-manager"
            }

            # (2 unchanged blocks hidden)
        }

        # (110 unchanged blocks hidden)
    }

  # module.application_gateway_itn.azurerm_web_application_firewall_policy.agw will be updated in-place
  ~ resource "azurerm_web_application_firewall_policy" "agw" {
        id                  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/io-p-itn-agw-waf-01"
        name                = "io-p-itn-agw-waf-01"
        tags                = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (4 unchanged attributes hidden)

      ~ policy_settings {
          ~ request_body_enforcement                  = false -> true
          ~ request_body_inspect_limit_in_kb          = 0 -> 128
            # (7 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.application_gateway_itn.azurerm_web_application_firewall_policy.app will be updated in-place
  ~ resource "azurerm_web_application_firewall_policy" "app" {
        id                  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/io-p-itn-agw-api-app-waf-01"
        name                = "io-p-itn-agw-api-app-waf-01"
        tags                = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (4 unchanged attributes hidden)

      ~ policy_settings {
          ~ request_body_enforcement                  = false -> true
          ~ request_body_inspect_limit_in_kb          = 0 -> 128
            # (7 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.application_gateway_weu.azurerm_web_application_firewall_policy.api_app will be updated in-place
  ~ resource "azurerm_web_application_firewall_policy" "api_app" {
        id                  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-external/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/io-p-waf-appgateway-api-app-policy"
        name                = "io-p-waf-appgateway-api-app-policy"
        tags                = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (4 unchanged attributes hidden)

      ~ policy_settings {
          ~ request_body_enforcement                  = false -> true
          ~ request_body_inspect_limit_in_kb          = 0 -> 128
            # (7 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.app_backend_weu["2"].module.appservice_app_backend.azurerm_linux_web_app.this will be updated in-place
  ~ resource "azurerm_linux_web_app" "this" {
      ~ app_settings                                   = {
          ~ "SERVICES_APP_BACKEND_API_URL"                    = "https://io-p-itn-svc-app-be-func-02.ambitioussea-e5d71305.italynorth.azurecontainerapps.io" -> "https://io-p-itn-svc-app-be-func-01.azurewebsites.net"
            # (122 unchanged elements hidden)
        }
        id                                             = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-linux/providers/Microsoft.Web/sites/io-p-app-appbackendl2"
        name                                           = "io-p-app-appbackendl2"
        tags                                           = {
            "BusinessUnit"                                   = "App IO"
            "CostCenter"                                     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"                                      = "Terraform"
            "Environment"                                    = "Prod"
            "ManagementTeam"                                 = "IO Platform"
            "Source"                                         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
            "hidden-link: /app-insights-conn-string"         = "[REDACTED]"
            "hidden-link: /app-insights-instrumentation-key" = "[REDACTED]"
            "hidden-link: /app-insights-resource-id"         = "[REDACTED]"
        }
        # (26 unchanged attributes hidden)

        # (3 unchanged blocks hidden)
    }

  # module.app_backend_weu["3"].module.appservice_app_backend.azurerm_linux_web_app.this will be updated in-place
  ~ resource "azurerm_linux_web_app" "this" {
      ~ app_settings                                   = {
          ~ "SERVICES_APP_BACKEND_API_URL"                    = "https://io-p-itn-svc-app-be-func-02.ambitioussea-e5d71305.italynorth.azurecontainerapps.io" -> "https://io-p-itn-svc-app-be-func-01.azurewebsites.net"
            # (122 unchanged elements hidden)
        }
        id                                             = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-linux/providers/Microsoft.Web/sites/io-p-app-appbackendl3"
        name                                           = "io-p-app-appbackendl3"
        tags                                           = {
            "BusinessUnit"                           = "App IO"
            "CostCenter"                             = "TS000 - Tecnologia e Servizi"
            "CreatedBy"                              = "Terraform"
            "Environment"                            = "Prod"
            "ManagementTeam"                         = "IO Platform"
            "Source"                                 = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
            "hidden-link: /app-insights-resource-id" = "[REDACTED]"
        }
        # (26 unchanged attributes hidden)

        # (3 unchanged blocks hidden)
    }

  # module.function_app_admin.module.function_admin_itn.azurerm_monitor_metric_alert.function_app_health_check[0] will be updated in-place
  ~ resource "azurerm_monitor_metric_alert" "function_app_health_check" {
      ~ enabled                  = false -> true
        id                       = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-platform-admin-rg-01/providers/Microsoft.Insights/metricAlerts/[io-p-itn-admin-func-01] Health Check Failed"
        name                     = "[io-p-itn-admin-func-01] Health Check Failed"
        tags                     = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "ModuleName"     = "azure_function_app"
            "ModuleSource"   = "DX"
            "ModuleVersion"  = "3.0.0"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (9 unchanged attributes hidden)

        # (2 unchanged blocks hidden)
    }

  # module.function_app_services.module.function_services_dx.azurerm_linux_function_app.this will be updated in-place
  ~ resource "azurerm_linux_function_app" "this" {
      ~ app_settings                                   = {
          + "APPINSIGHTS_INSTRUMENTATIONKEY"                  = "[REDACTED]"
            # (61 unchanged elements hidden)
        }
        id                                             = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-funcsvc-rg-01/providers/Microsoft.Web/sites/io-p-itn-funcsvc-func-01"
        name                                           = "io-p-itn-funcsvc-func-01"
        tags                                           = {
            "BusinessUnit"                           = "App IO"
            "CostCenter"                             = "TS000 - Tecnologia e Servizi"
            "CreatedBy"                              = "Terraform"
            "Environment"                            = "Prod"
            "ManagementTeam"                         = "IO Platform"
            "ModuleName"                             = "azure_function_app"
            "ModuleSource"                           = "DX"
            "ModuleVersion"                          = "2.0.2"
            "Source"                                 = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
            "hidden-link: /app-insights-resource-id" = "[REDACTED]"
        }
        # (33 unchanged attributes hidden)

        # (3 unchanged blocks hidden)
    }

  # module.function_app_services.module.function_services_dx.azurerm_linux_function_app_slot.this[0] will be updated in-place
  ~ resource "azurerm_linux_function_app_slot" "this" {
      ~ app_settings                                   = {
          + "APPINSIGHTS_INSTRUMENTATIONKEY"                  = "[REDACTED]"
            # (61 unchanged elements hidden)
        }
        id                                             = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-funcsvc-rg-01/providers/Microsoft.Web/sites/io-p-itn-funcsvc-func-01/slots/staging"
        name                                           = "staging"
        tags                                           = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "ModuleName"     = "azure_function_app"
            "ModuleSource"   = "DX"
            "ModuleVersion"  = "2.0.2"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (31 unchanged attributes hidden)

      ~ site_config {
          - application_insights_key                      = (sensitive value) -> null
          ~ health_check_eviction_time_in_min             = 0 -> 2
            # (32 unchanged attributes hidden)

            # (1 unchanged block hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.platform_api_gateway_apim_itn.module.platform_api_gateway.azurerm_api_management.this will be updated in-place
  ~ resource "azurerm_api_management" "this" {
        id                            = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.ApiManagement/service/io-p-itn-platform-api-gateway-apim-01"
        name                          = "io-p-itn-platform-api-gateway-apim-01"
        tags                          = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "ModuleName"     = "azure_api_management"
            "ModuleSource"   = "DX"
            "ModuleVersion"  = "1.2.2"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (21 unchanged attributes hidden)

      ~ hostname_configuration {
          ~ proxy {
              ~ default_ssl_binding             = true -> false
                # (12 unchanged attributes hidden)
            }

            # (1 unchanged block hidden)
        }

        # (8 unchanged blocks hidden)
    }

  # module.platform_service_bus_namespace_itn.module.platform_service_bus_namespace.data.azurerm_private_dns_zone.this[0] will be read during apply
  # (depends on a resource or a module with changes pending)
 <= data "azurerm_private_dns_zone" "this" {
      + id                                                    = (known after apply)
      + max_number_of_record_sets                             = (known after apply)
      + max_number_of_virtual_network_links                   = (known after apply)
      + max_number_of_virtual_network_links_with_registration = (known after apply)
      + name                                                  = "privatelink.servicebus.windows.net"
      + number_of_record_sets                                 = (known after apply)
      + resource_group_name                                   = "io-p-evt-rg"
    }

  # module.platform_service_bus_namespace_itn.module.platform_service_bus_namespace.azurerm_private_endpoint.service_bus_pep[0] will be updated in-place
  ~ resource "azurerm_private_endpoint" "service_bus_pep" {
        id                            = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/privateEndpoints/io-p-itn-platform-sbns-pep-01"
        name                          = "io-p-itn-platform-sbns-pep-01"
        tags                          = {
            "BusinessUnit"   = "App IO"
            "CostCenter"     = "TS000 - Tecnologia e Servizi"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Platform"
            "ModuleName"     = "azure_service_bus_namespace"
            "ModuleSource"   = "DX"
            "ModuleVersion"  = "0.0.6"
            "Source"         = "https://github.com/pagopa/io-infra/blob/main/src/common/prod"
        }
        # (7 unchanged attributes hidden)

      ~ private_dns_zone_group {
            id                   = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.Network/privateEndpoints/io-p-itn-platform-sbns-pep-01/privateDnsZoneGroups/private-dns-zone-group"
            name                 = "private-dns-zone-group"
          ~ private_dns_zone_ids = [
              - "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-evt-rg/providers/Microsoft.Network/privateDnsZones/privatelink.servicebus.windows.net",
            ] -> (known after apply)
        }

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 11 to change, 0 to destroy.

Warning: Argument is deprecated

  with module.apim_itn.module.apim.azurerm_api_management.this,
  on .terraform/modules/apim_itn.apim/main.tf line 18, in resource "azurerm_api_management" "this":
  18: resource "azurerm_api_management" "this" {

`key_vault_id` has been deprecated in favour of `key_vault_certificate_id`
and will be removed in v5.0 of the AzureRM provider

(and 7 more similar warnings elsewhere)

Add io-com path rule

1455b84

lucamancosu temporarily deployed to dev-ci October 15, 2025 10:34 — with GitHub Actions Inactive

lucamancosu temporarily deployed to prod-ci October 15, 2025 10:34 — with GitHub Actions Inactive

move com path rule at the end of rules array trying to avoid a big tf…

3afc357

… plan change

lucamancosu temporarily deployed to dev-ci October 15, 2025 10:51 — with GitHub Actions Inactive

lucamancosu temporarily deployed to prod-ci October 15, 2025 10:51 — with GitHub Actions Inactive

lucamancosu requested review from BurnedMarshal and Garma00 October 15, 2025 10:57

lucamancosu marked this pull request as ready for review October 15, 2025 10:57

lucamancosu requested review from a team as code owners October 15, 2025 10:57

lucamancosu temporarily deployed to dev-ci October 15, 2025 10:58 — with GitHub Actions Inactive

lucamancosu temporarily deployed to prod-ci October 15, 2025 10:58 — with GitHub Actions Inactive

Garma00 approved these changes Oct 15, 2025

View reviewed changes

BurnedMarshal approved these changes Oct 16, 2025

View reviewed changes

Merge branch 'main' into chores/add-io-com-app-gateway-path-rule

751e81a

Garma00 deployed to dev-ci October 16, 2025 14:48 — with GitHub Actions Active

Garma00 deployed to prod-ci October 16, 2025 14:49 — with GitHub Actions Active

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add IO-COM app gateway path rule #1675

Add IO-COM app gateway path rule #1675

lucamancosu commented Oct 15, 2025

Uh oh!

sonarqubecloud bot commented Oct 16, 2025

Uh oh!

github-actions bot commented Oct 16, 2025

Uh oh!

github-actions bot commented Oct 16, 2025

✅ All Terraform module locks are up to date

Uh oh!

github-actions bot commented Oct 16, 2025

✅ All Terraform module locks are up to date

Uh oh!

github-actions bot commented Oct 16, 2025

Uh oh!

github-actions bot commented Oct 16, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Add IO-COM app gateway path rule #1675

Are you sure you want to change the base?

Add IO-COM app gateway path rule #1675

Conversation

lucamancosu commented Oct 15, 2025

Uh oh!

sonarqubecloud bot commented Oct 16, 2025

Quality Gate passed

Uh oh!

github-actions bot commented Oct 16, 2025

Uh oh!

github-actions bot commented Oct 16, 2025

✅ All Terraform module locks are up to date

Uh oh!

github-actions bot commented Oct 16, 2025

✅ All Terraform module locks are up to date

Uh oh!

github-actions bot commented Oct 16, 2025

📖 Terraform Plan (src/common/dev) - success

Uh oh!

github-actions bot commented Oct 16, 2025

📖 Terraform Plan (src/common/prod) - success

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants