Skip to content

feat: [PIDM-1151] create checkout front door cdn #3577

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dylantangredi-jakala wants to merge 34 commits into
base: main
Choose a base branch
from
Open

feat: [PIDM-1151] create checkout front door cdn #3577

Show file tree
Hide file tree
Changes from 23 commits
Commits
Show all changes
34 commits
Select commit Hold shift + click to select a range
0216862
feat: update checkout-app domain to v4
pietro-tota Oct 31, 2025
668884b
feat: [PIDM-1151] update chk terraform providers
dylantangredi-jakala Jan 13, 2026
d9ae9ab
Merge branch 'main' into PIDM-1151-migrate-checkout-cdn
dylantangredi-jakala Jan 13, 2026
4f98678
feat: [PIDM-1151] migrate terraform modules to v4
dylantangredi-jakala Jan 13, 2026
3a81447
feat: [PIDM-1151] add dns default ttl
dylantangredi-jakala Jan 13, 2026
7d003e2
feat: [PIDM-1151] upgrade azurerm provider to v4
dylantangredi-jakala Jan 13, 2026
710f651
Merge branch 'PIDM-1151-migrate-checkout-cdn' of https://github.com/p…
dylantangredi-jakala Jan 13, 2026
2754eda
chore: [PIDM-1151] update lock file
dylantangredi-jakala Jan 13, 2026
1e22744
feat: [PIDM-1151] rework checkout config for front door cdn
dylantangredi-jakala Jan 13, 2026
aabf263
chore: [PIDM-1151] run pre-commit
dylantangredi-jakala Jan 13, 2026
7713db8
fix: [PIDM-1151] remove unexpected param
dylantangredi-jakala Jan 13, 2026
fda13cb
Merge branch 'main' into PIDM-1151-migrate-checkout-cdn
dylantangredi-jakala Jan 13, 2026
74d80fa
Merge branch 'main' into PIDM-1151-migrate-checkout-cdn
dylantangredi-jakala Jan 14, 2026
62be2c6
Merge branch 'main' into PIDM-1151-migrate-checkout-app-to-module-v4
pietro-tota Jan 14, 2026
6b99f02
Merge branch 'PIDM-1151-migrate-checkout-app-to-module-v4' into PIDM-…
dylantangredi-jakala Jan 14, 2026
aa852b7
feat: [PIDM-1151] set tf required version to match cdn_frontdoor module
dylantangredi-jakala Jan 14, 2026
3c0920b
fix: [PIDM-1151] change caching behaviour to frontdoor default
dylantangredi-jakala Jan 14, 2026
b3483da
feat: [PIDM-1151] upgrade checkout_payment_wallet modules to v4
dylantangredi-jakala Jan 14, 2026
0b2fce4
Merge branch 'main' into PIDM-1151-migrate-checkout-app-to-module-v4
dylantangredi-jakala Jan 14, 2026
c49d059
Merge branch 'PIDM-1151-migrate-checkout-app-to-module-v4' into PIDM-…
dylantangredi-jakala Jan 14, 2026
5aa7da2
chore: [PIDM-1151] revert file to use classic cdn
dylantangredi-jakala Jan 15, 2026
f70a216
feat: [PIDM-1151] add frontdoor cdn file (disabled/no custom domains)
dylantangredi-jakala Jan 15, 2026
d94674c
chore: [PIDM-1151] update lockfile
dylantangredi-jakala Jan 15, 2026
be39e56
chore: [PIDM-1151] run tf init and pre-commit from scratch
dylantangredi-jakala Jan 16, 2026
04f082c
Merge branch 'main' into PIDM-1151-migrate-checkout-app-to-module-v4
dylantangredi-jakala Jan 16, 2026
c594868
Merge branch 'PIDM-1151-migrate-checkout-app-to-module-v4' into PIDM-…
dylantangredi-jakala Jan 16, 2026
0ab6f65
Merge branch 'main' into PIDM-1151-migrate-checkout-cdn
dylantangredi-jakala Jan 27, 2026
3d555b8
chore: [PIDM-1151] upgrade module to latest version
dylantangredi-jakala Jan 27, 2026
4b6eea8
chore: [PIDM-1151] upgrade locks to match CI runner platform
dylantangredi-jakala Jan 27, 2026
22c67e2
Merge branch 'main' into PIDM-1151-migrate-checkout-cdn
dylantangredi-jakala Feb 2, 2026
543020b
chore: [PIDM-1151] remove unused domains from csp directives
dylantangredi-jakala Feb 2, 2026
30eb6c9
chore: [PIDM-1151] add temp custom domain array
dylantangredi-jakala Feb 2, 2026
07c164a
Merge branch 'main' into PIDM-1151-migrate-checkout-cdn
dylantangredi-jakala Feb 2, 2026
5720335
chore: [PIDM-1151] remove unnecessary count
dylantangredi-jakala Feb 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
141 changes: 81 additions & 60 deletions src/domains/checkout-app/.terraform.lock.hcl
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion src/domains/checkout-app/02_namespace.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ resource "kubernetes_namespace" "namespace" {
}

module "workload_identity" {
source = "./.terraform/modules/__v3__/kubernetes_workload_identity_configuration"
source = "./.terraform/modules/__v4__/kubernetes_workload_identity_configuration"
workload_identity_name_prefix = var.domain
workload_identity_resource_group_name = data.azurerm_kubernetes_cluster.aks.resource_group_name
aks_name = data.azurerm_kubernetes_cluster.aks.name
Expand Down
2 changes: 1 addition & 1 deletion src/domains/checkout-app/03_serviceaccounts_azure_devops.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ resource "kubernetes_namespace" "namespace_system" {
}

module "kubernetes_service_account" {
source = "./.terraform/modules/__v3__/kubernetes_service_account"
source = "./.terraform/modules/__v4__/kubernetes_service_account"
name = "azure-devops"
namespace = "${var.domain}-system"
}
Expand Down
4 changes: 2 additions & 2 deletions src/domains/checkout-app/04_apim_checkout_authentication.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ locals {
}

module "apim_checkout_authentication" {
source = "./.terraform/modules/__v3__/api_management_product"
source = "./.terraform/modules/__v4__/api_management_product"

product_id = "checkout-authentication"
display_name = "Checkout Authentication"
Expand All @@ -34,7 +34,7 @@ resource "azurerm_api_management_api_version_set" "checkout_auth_service_api_v1"
}

module "apim_checkout_auth_service_v1" {
source = "./.terraform/modules/__v3__/api_management_api"
source = "./.terraform/modules/__v4__/api_management_api"

name = "${local.project_short}-auth-service-api"
api_management_name = data.azurerm_api_management.apim.name
Expand Down
4 changes: 2 additions & 2 deletions src/domains/checkout-app/04_apim_checkout_carts_auth.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
##############

module "apim_checkout_carts_auth" {
source = "./.terraform/modules/__v3__/api_management_product"
source = "./.terraform/modules/__v4__/api_management_product"

product_id = "checkout-carts"
display_name = "Checkout pagoPA carts"
Expand Down Expand Up @@ -40,7 +40,7 @@ resource "azurerm_api_management_api_version_set" "checkout_carts_auth_api_v1" {
}

module "apim_checkout_carts_auth_v1" {
source = "./.terraform/modules/__v3__/api_management_api"
source = "./.terraform/modules/__v4__/api_management_api"

name = "${local.parent_project}-carts-auth-api"
api_management_name = data.azurerm_api_management.apim.name
Expand Down
4 changes: 2 additions & 2 deletions src/domains/checkout-app/04_apim_checkout_ec.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
##############

module "apim_checkout_ec_product" {
source = "./.terraform/modules/__v3__/api_management_product"
source = "./.terraform/modules/__v4__/api_management_product"

product_id = "checkout-ec"
display_name = "checkout pagoPA for ECs"
Expand Down Expand Up @@ -40,7 +40,7 @@ resource "azurerm_api_management_api_version_set" "checkout_ec_api_v1" {
}

module "apim_checkout_ec_api_v1" {
source = "./.terraform/modules/__v3__/api_management_api"
source = "./.terraform/modules/__v4__/api_management_api"

name = "${local.parent_project}-checkout-ec-api"
api_management_name = data.azurerm_api_management.apim.name
Expand Down
4 changes: 2 additions & 2 deletions src/domains/checkout-app/04_apim_checkout_feature_flags.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ locals {
}

module "apim_checkout_featureflags" {
source = "./.terraform/modules/__v3__/api_management_product"
source = "./.terraform/modules/__v4__/api_management_product"

product_id = "checkout-feature-flags"
display_name = "Checkout Feature flags"
Expand All @@ -34,7 +34,7 @@ resource "azurerm_api_management_api_version_set" "checkout_feature_flags_api_v1
}

module "apim_checkout_feature_flags_v1" {
source = "./.terraform/modules/__v3__/api_management_api"
source = "./.terraform/modules/__v4__/api_management_api"

name = "${local.project_short}-feature-flags-api"
api_management_name = data.azurerm_api_management.apim.name
Expand Down
4 changes: 2 additions & 2 deletions src/domains/checkout-app/04_apim_checkout_identity_provider_mock.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ locals {

module "apim_checkout_identity_provider_mock_product" {
count = var.env_short != "p" ? 1 : 0
source = "./.terraform/modules/__v3__/api_management_product"
source = "./.terraform/modules/__v4__/api_management_product"

product_id = "checkout-identity-provider-mock"
display_name = "Checkout identity provider mock"
Expand Down Expand Up @@ -38,7 +38,7 @@ resource "azurerm_api_management_api_version_set" "checkout_identity_provider_mo

module "apim_checkout_identity_provider_mock_v1" {
count = var.env_short != "p" ? 1 : 0
source = "./.terraform/modules/__v3__/api_management_api"
source = "./.terraform/modules/__v4__/api_management_api"

name = "${local.project_short}-identity-provider-mock-api"
api_management_name = data.azurerm_api_management.apim.name
Expand Down
4 changes: 2 additions & 2 deletions src/domains/checkout-app/04_apim_checkout_payment_wallet.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ locals {
}

module "apim_checkout_payment_wallet_product" {
source = "./.terraform/modules/__v3__/api_management_product"
source = "./.terraform/modules/__v4__/api_management_product"

product_id = "checkout-payment-wallet"
display_name = local.apim_checkout_payment_wallet_api.display_name
Expand All @@ -35,7 +35,7 @@ resource "azurerm_api_management_api_version_set" "checkout_payment_wallet_api_v
}

module "apim_checkout_payment_wallet_api_v1" {
source = "./.terraform/modules/__v3__/api_management_api"
source = "./.terraform/modules/__v4__/api_management_api"

name = "${local.parent_project}-payment-wallet-api"
api_management_name = data.azurerm_api_management.apim.name
Expand Down
5 changes: 2 additions & 3 deletions src/domains/checkout-app/05_aks_middleware_tools.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
module "tls_checker" {
source = "./.terraform/modules/__v3__/tls_checker"
source = "./.terraform/modules/__v4__/tls_checker"

https_endpoint = local.checkout_hostname
alert_name = local.checkout_hostname
Expand All @@ -24,12 +24,11 @@ module "tls_checker" {
}

module "cert_mounter" {
source = "./.terraform/modules/__v3__/cert_mounter"
source = "./.terraform/modules/__v4__/cert_mounter"
namespace = var.domain
certificate_name = replace(local.checkout_hostname, ".", "-")
kv_name = data.azurerm_key_vault.key_vault_checkout.name
tenant_id = data.azurerm_subscription.current.tenant_id
workload_identity_enabled = true
workload_identity_service_account_name = module.workload_identity.workload_identity_service_account_name
workload_identity_client_id = module.workload_identity.workload_identity_client_id
depends_on = [module.workload_identity]
Expand Down
2 changes: 1 addition & 1 deletion src/domains/checkout-app/05_checkout_fe.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ resource "azurerm_resource_group" "checkout_fe_rg" {
* CDN
*/
module "checkout_cdn" {
source = "./.terraform/modules/__v3__/cdn"
source = "./.terraform/modules/__v4__/cdn"

count = var.checkout_enabled ? 1 : 0
name = "checkout"
Expand Down
Loading