feat: [SIW-2951] Added wallet instance revocation by wallet provider

[silvicir]

No description provided.

[github-actions]

⚠️ Deprecation Notice

Starting January 16th, 2026, the DX workflows will no longer support npm and yarn. All new builds will be required to use pnpm.

Tip

Ready to make the switch? To help with the transition, we've published a migration guide on our blog, check out the announcement for more details.

[github-actions]

Tip

✅ All Terraform module locks are up to date

No module changes detected - everything is in sync!

📋 Pre-commit Output Log

[INFO] Initializing environment for https://github.com/pagopa/dx.
[INFO] Initializing environment for https://github.com/antonbabenko/pre-commit-terraform.
Lock Terraform Registry modules..........................................Passed

_{Generated on Thu Oct 16 10:06:32 UTC 2025
Run lock_modules on folder: infra/resources/prod/}

[github-actions]

📖 Terraform Plan (infra/resources/prod) - success

Show Plan

  # module.storage_accounts.azurerm_storage_queue.wallet_instances_revocation_check will be destroyed
  # (because azurerm_storage_queue.wallet_instances_revocation_check is not in configuration)
  - resource "azurerm_storage_queue" "wallet_instances_revocation_check" {
      - id                   = "https://iopitnwalletst01.queue.core.windows.net/wallet-instances-revocation-check" -> null
      - metadata             = {} -> null
      - name                 = "wallet-instances-revocation-check" -> null
      - resource_manager_id  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-wallet-rg-01/providers/Microsoft.Storage/storageAccounts/iopitnwalletst01/queueServices/default/queues/wallet-instances-revocation-check" -> null
      - storage_account_name = "iopitnwalletst01" -> null
    }

  # module.storage_accounts.azurerm_storage_queue.wallet_instances_revocation_check_02 will be destroyed
  # (because azurerm_storage_queue.wallet_instances_revocation_check_02 is not in configuration)
  - resource "azurerm_storage_queue" "wallet_instances_revocation_check_02" {
      - id                   = "https://iopitnwalletst01.queue.core.windows.net/wallet-instances-revocation-check-02" -> null
      - metadata             = {} -> null
      - name                 = "wallet-instances-revocation-check-02" -> null
      - resource_manager_id  = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-wallet-rg-01/providers/Microsoft.Storage/storageAccounts/iopitnwalletst01/queueServices/default/queues/wallet-instances-revocation-check-02" -> null
      - storage_account_name = "iopitnwalletst01" -> null
    }

  # module.apim_itn.module.apim_v2_web_wallet_api.azurerm_api_management_api.this will be updated in-place
  ~ resource "azurerm_api_management_api" "this" {
      + description           = "Wallet APIs"
      ~ display_name          = "IO Wallet - IO Web API" -> "IO Web - Wallet"
        id                    = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-common-rg-01/providers/Microsoft.ApiManagement/service/io-p-itn-apim-01/apis/io-p-ioweb-wallet;rev=1"
        name                  = "io-p-ioweb-wallet"
        # (15 unchanged attributes hidden)

        # (2 unchanged blocks hidden)
    }

  # module.function_apps.module.function_app_user_02.azurerm_linux_function_app.this will be updated in-place
  ~ resource "azurerm_linux_function_app" "this" {
      ~ app_settings                                   = {
          - "AzureWebJobs.addWalletInstanceToValidationQueue.Disabled"  = "1" -> null
          - "AzureWebJobs.validateWalletInstance.Disabled"              = "1" -> null
          - "ValidateWalletInstanceCertificatesQueueName"               = "wallet-instances-revocation-check-02" -> null
            # (72 unchanged elements hidden)
        }
        id                                             = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-wallet-rg-01/providers/Microsoft.Web/sites/io-p-itn-wallet-user-func-02"
        name                                           = "io-p-itn-wallet-user-func-02"
        tags                                           = {
            "CostCenter"                                     = "TS310 - PAGAMENTI & SERVIZI"
            "CreatedBy"                                      = "Terraform"
            "Environment"                                    = "Prod"
            "ManagementTeam"                                 = "IO Wallet"
            "ModuleName"                                     = "azure_function_app"
            "ModuleSource"                                   = "DX"
            "ModuleVersion"                                  = "3.0.0"
            "Owner"                                          = "IO"
            "Source"                                         = "https://github.com/pagopa/io-wallet/blob/main/infra/resources/prod"
            "hidden-link: /app-insights-conn-string"         = "[REDACTED]"
            "hidden-link: /app-insights-instrumentation-key" = "[REDACTED]"
            "hidden-link: /app-insights-resource-id"         = "[REDACTED]"
        }
        # (33 unchanged attributes hidden)

      ~ sticky_settings {
          ~ app_setting_names       = [
                # (6 unchanged elements hidden)
                "AzureFunctionsJobHost__logging__applicationInsights__samplingSettings__initialSamplingPercentage",
              - "AzureWebJobs.addWalletInstanceToValidationQueue.Disabled",
              - "AzureWebJobs.validateWalletInstance.Disabled",
                "AzureWebJobs.generateEntityConfiguration.Disabled",
                # (2 unchanged elements hidden)
            ]
            # (1 unchanged attribute hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.function_apps.module.function_app_user_02.azurerm_linux_function_app_slot.this[0] will be updated in-place
  ~ resource "azurerm_linux_function_app_slot" "this" {
      ~ app_settings                                   = {
          - "AzureWebJobs.addWalletInstanceToValidationQueue.Disabled"  = "1" -> null
          - "AzureWebJobs.validateWalletInstance.Disabled"              = "1" -> null
          - "ValidateWalletInstanceCertificatesQueueName"               = "wallet-instances-revocation-check-02" -> null
            # (73 unchanged elements hidden)
        }
        id                                             = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-wallet-rg-01/providers/Microsoft.Web/sites/io-p-itn-wallet-user-func-02/slots/staging"
        name                                           = "staging"
        tags                                           = {
            "CostCenter"     = "TS310 - PAGAMENTI & SERVIZI"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Wallet"
            "ModuleName"     = "azure_function_app"
            "ModuleSource"   = "DX"
            "ModuleVersion"  = "3.0.0"
            "Owner"          = "IO"
            "Source"         = "https://github.com/pagopa/io-wallet/blob/main/infra/resources/prod"
        }
        # (31 unchanged attributes hidden)

        # (2 unchanged blocks hidden)
    }

  # module.function_apps.module.function_app_user_uat.azurerm_linux_function_app.this will be updated in-place
  ~ resource "azurerm_linux_function_app" "this" {
      ~ app_settings                                   = {
          - "AzureWebJobs.addWalletInstanceToValidationQueue.Disabled"  = "1" -> null
          - "AzureWebJobs.validateWalletInstance.Disabled"              = "1" -> null
          - "ValidateWalletInstanceCertificatesQueueName"               = "wallet-instances-revocation-check-02" -> null
            # (72 unchanged elements hidden)
        }
        id                                             = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-wallet-rg-01/providers/Microsoft.Web/sites/io-u-itn-wallet-user-func-01"
        name                                           = "io-u-itn-wallet-user-func-01"
        tags                                           = {
            "CostCenter"     = "TS310 - PAGAMENTI & SERVIZI"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Wallet"
            "ModuleName"     = "azure_function_app"
            "ModuleSource"   = "DX"
            "ModuleVersion"  = "3.0.0"
            "Owner"          = "IO"
            "Source"         = "https://github.com/pagopa/io-wallet/blob/main/infra/resources/prod"
        }
        # (33 unchanged attributes hidden)

        # (3 unchanged blocks hidden)
    }

  # module.function_apps.module.function_app_user_uat.azurerm_linux_function_app_slot.this[0] will be updated in-place
  ~ resource "azurerm_linux_function_app_slot" "this" {
      ~ app_settings                                   = {
          - "AzureWebJobs.addWalletInstanceToValidationQueue.Disabled"  = "1" -> null
          - "AzureWebJobs.validateWalletInstance.Disabled"              = "1" -> null
          - "ValidateWalletInstanceCertificatesQueueName"               = "wallet-instances-revocation-check-02" -> null
            # (73 unchanged elements hidden)
        }
        id                                             = "/subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-itn-wallet-rg-01/providers/Microsoft.Web/sites/io-u-itn-wallet-user-func-01/slots/staging"
        name                                           = "staging"
        tags                                           = {
            "CostCenter"     = "TS310 - PAGAMENTI & SERVIZI"
            "CreatedBy"      = "Terraform"
            "Environment"    = "Prod"
            "ManagementTeam" = "IO Wallet"
            "ModuleName"     = "azure_function_app"
            "ModuleSource"   = "DX"
            "ModuleVersion"  = "3.0.0"
            "Owner"          = "IO"
            "Source"         = "https://github.com/pagopa/io-wallet/blob/main/infra/resources/prod"
        }
        # (31 unchanged attributes hidden)

        # (2 unchanged blocks hidden)
    }

Plan: 0 to add, 5 to change, 2 to destroy.

Warning: Deprecated attribute

  on .terraform/modules/storage_accounts.storage_account/cmk.tf line 18, in resource "azurerm_key_vault_access_policy" "keys":
  18:   for_each     = (local.cmk_flags.kv && try(local.cmk_info.kv.same_subscription, false) && try(data.azurerm_key_vault.this["kv"].enable_rbac_authorization, false) == false ? toset(["kv"]) : toset([]))

The attribute "enable_rbac_authorization" is deprecated. Refer to the
provider documentation for details.

(and 3 more similar warnings elsewhere)