From eedd753c4d6b85949fb1ec03abfa107e036d009d Mon Sep 17 00:00:00 2001 From: Diego Lagos <92735530+diegolagospagopa@users.noreply.github.com> Date: Wed, 22 Jan 2025 20:38:13 +0100 Subject: [PATCH] fix: statis analysis -> removed cached folder for terraform (#2741) * pre-commit fixs * removed cached folder because give more problems that solutions * minor fix --- .github/workflows/static_analysis.yml | 13 ++------- .github/workflows/static_analysis_pr.yml | 2 +- src/domains/fdr-app/README.md | 28 +++++++++---------- src/domains/fdr-common/README.md | 20 ++++++------- .../observability/env/uat/terraform.tfvars | 2 +- src/domains/payopt-app/05_subkey.tf | 6 ++-- src/domains/payopt-app/99_variables.tf | 4 +-- src/domains/payopt-app/README.md | 3 +- .../payopt-app/env/itn-dev/terraform.tfvars | 2 +- .../payopt-app/env/itn-prod/terraform.tfvars | 2 +- .../payopt-app/env/itn-uat/terraform.tfvars | 2 +- src/domains/printit-app/README.md | 6 ++-- src/elk-monitoring/README.md | 20 ++++++------- 13 files changed, 51 insertions(+), 59 deletions(-) diff --git a/.github/workflows/static_analysis.yml b/.github/workflows/static_analysis.yml index 04dd757063..6c8572e4c6 100644 --- a/.github/workflows/static_analysis.yml +++ b/.github/workflows/static_analysis.yml @@ -1,9 +1,10 @@ -name: Static Analysis +name: Static Analysis Main on: push: branches: - main + workflow_dispatch: jobs: static_analysis: @@ -33,13 +34,8 @@ jobs: echo "+ 🔨 CREATE CACHE FOLDER +" echo -e "+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-\n" - export TF_PLUGIN_CACHE_DIR="/tmp/.terraform.d/plugin-cache" - mkdir -p ${TF_PLUGIN_CACHE_DIR} - ls -la ${TF_PLUGIN_CACHE_DIR} - echo "📢 Show space" df -h - du -h ${TF_PLUGIN_CACHE_DIR} echo -e "\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-" echo "+ 🏁 INIT TERRAFORM FOLDERS 🏁 +" @@ -77,9 +73,6 @@ jobs: done echo "📢 Show space 3" - df -h - ls -la /tmp/.terraform.d/plugin-cache - du -h -d 5 ${TF_PLUGIN_CACHE_DIR} - name: Show precommit version shell: bash @@ -99,8 +92,6 @@ jobs: echo "+- 🚨 PRECOMMIT TERRAFORM 🚨 -+" echo -e "+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n" - export TF_PLUGIN_CACHE_DIR="/tmp/.terraform.d/plugin-cache" - TAG=v1.96.2@sha256:01f870b7689b5a09c1a370914fcddcac42c4b6478c9d369e1d2590dd0a66ffd0 docker run \ -v $(pwd):/lint \ diff --git a/.github/workflows/static_analysis_pr.yml b/.github/workflows/static_analysis_pr.yml index 3e9b3b3e6a..ca331f4529 100644 --- a/.github/workflows/static_analysis_pr.yml +++ b/.github/workflows/static_analysis_pr.yml @@ -1,4 +1,4 @@ -name: Static Analysis PR +name: 🛃 Static Analysis PR on: push: diff --git a/src/domains/fdr-app/README.md b/src/domains/fdr-app/README.md index 43a417e8e9..ebdcfc75c0 100644 --- a/src/domains/fdr-app/README.md +++ b/src/domains/fdr-app/README.md @@ -153,38 +153,38 @@ |------|-------------|------|---------|:--------:| | [apim\_dns\_zone\_prefix](#input\_apim\_dns\_zone\_prefix) | The dns subdomain for apim. | `string` | `null` | no | | [apim\_fdr\_nodo\_pagopa\_enable](#input\_apim\_fdr\_nodo\_pagopa\_enable) | Enable Fdr Service Nodo pagoPA side | `bool` | `false` | no | -| [app\_service\_plan\_info](#input\_app\_service\_plan\_info) | Allows to configurate the internal service plan | 
object({
    kind                         = string # The kind of the App Service Plan to create. Possible values are Windows (also available as App), Linux, elastic (for Premium Consumption) and FunctionApp (for a Consumption Plan).
    sku_size                     = string # Specifies the plan's instance size.
    maximum_elastic_worker_count = number # The maximum number of total workers allowed for this ElasticScaleEnabled App Service Plan.
    worker_count                 = number # The number of Workers (instances) to be allocated.
    zone_balancing_enabled       = bool   # Should the Service Plan balance across Availability Zones in the region. Changing this forces a new resource to be created.
  })
| 
{
  "kind": "Linux",
  "maximum_elastic_worker_count": 0,
  "sku_size": "P1v3",
  "worker_count": 0,
  "zone_balancing_enabled": false
}
| no | +| [app\_service\_plan\_info](#input\_app\_service\_plan\_info) | Allows to configurate the internal service plan | 
object({
    kind                         = string # The kind of the App Service Plan to create. Possible values are Windows (also available as App), Linux, elastic (for Premium Consumption) and FunctionApp (for a Consumption Plan).
    sku_size                     = string # Specifies the plan's instance size.
    maximum_elastic_worker_count = number # The maximum number of total workers allowed for this ElasticScaleEnabled App Service Plan.
    worker_count                 = number # The number of Workers (instances) to be allocated.
    zone_balancing_enabled       = bool   # Should the Service Plan balance across Availability Zones in the region. Changing this forces a new resource to be created.
  })
| 
{
  "kind": "Linux",
  "maximum_elastic_worker_count": 0,
  "sku_size": "P1v3",
  "worker_count": 0,
  "zone_balancing_enabled": false
}
| no | | [cidr\_subnet\_reporting\_fdr](#input\_cidr\_subnet\_reporting\_fdr) | Address prefixes subnet reporting\_fdr function | `list(string)` | `null` | no | | [cname\_record\_name](#input\_cname\_record\_name) | n/a | `string` | `"config"` | no | | [dns\_zone\_internal\_prefix](#input\_dns\_zone\_internal\_prefix) | The dns subdomain. | `string` | `null` | no | | [domain](#input\_domain) | n/a | `string` | n/a | yes | | [enable\_fdr3\_features](#input\_enable\_fdr3\_features) | Feature flag that enabled FdR-Fase3 APIs | `bool` | `false` | no | -| [enabled\_features](#input\_enabled\_features) | Features enabled in this domain | 
object({
  })
| `{}` | no | +| [enabled\_features](#input\_enabled\_features) | Features enabled in this domain | 
object({
  })
| `{}` | no | | [env](#input\_env) | n/a | `string` | n/a | yes | | [env\_short](#input\_env\_short) | n/a | `string` | n/a | yes | | [event\_name](#input\_event\_name) | Event name related to an EventHub | `string` | `null` | no | | [eventhub\_name](#input\_eventhub\_name) | EventHub name | `string` | `null` | no | | [external\_domain](#input\_external\_domain) | Domain for delegation | `string` | `null` | no | -| [fdr\_json\_to\_xml\_function](#input\_fdr\_json\_to\_xml\_function) | FdR JSON to XML function | 
object({
    always_on                    = bool
    kind                         = string
    sku_size                     = string
    sku_tier                     = string
    maximum_elastic_worker_count = number
  })
| 
{
  "always_on": true,
  "kind": "Linux",
  "maximum_elastic_worker_count": 1,
  "sku_size": "B1",
  "sku_tier": "Basic"
}
| no | +| [fdr\_json\_to\_xml\_function](#input\_fdr\_json\_to\_xml\_function) | FdR JSON to XML function | 
object({
    always_on                    = bool
    kind                         = string
    sku_size                     = string
    sku_tier                     = string
    maximum_elastic_worker_count = number
  })
| 
{
  "always_on": true,
  "kind": "Linux",
  "maximum_elastic_worker_count": 1,
  "sku_size": "B1",
  "sku_tier": "Basic"
}
| no | | [fdr\_json\_to\_xml\_function\_app\_image\_tag](#input\_fdr\_json\_to\_xml\_function\_app\_image\_tag) | FdR JSON to XML function app docker image tag. Defaults to 'latest' | `string` | `"latest"` | no | -| [fdr\_json\_to\_xml\_function\_autoscale](#input\_fdr\_json\_to\_xml\_function\_autoscale) | FdR JSON to XML function autoscaling parameters | 
object({
    default = number
    minimum = number
    maximum = number
  })
| n/a | yes | +| [fdr\_json\_to\_xml\_function\_autoscale](#input\_fdr\_json\_to\_xml\_function\_autoscale) | FdR JSON to XML function autoscaling parameters | 
object({
    default = number
    minimum = number
    maximum = number
  })
| n/a | yes | | [fdr\_json\_to\_xml\_function\_network\_policies\_enabled](#input\_fdr\_json\_to\_xml\_function\_network\_policies\_enabled) | Network policies enabled | `bool` | `false` | no | | [fdr\_json\_to\_xml\_function\_subnet](#input\_fdr\_json\_to\_xml\_function\_subnet) | Address prefixes subnet | `list(string)` | `null` | no | -| [fdr\_re\_function](#input\_fdr\_re\_function) | FdR RE function | 
object({
    always_on = bool
    kind      = string
    sku_size  = string
    #    sku_tier                     = string
    maximum_elastic_worker_count = number
  })
| 
{
  "always_on": true,
  "kind": "Linux",
  "maximum_elastic_worker_count": 1,
  "sku_size": "B1"
}
| no | +| [fdr\_re\_function](#input\_fdr\_re\_function) | FdR RE function | 
object({
    always_on = bool
    kind      = string
    sku_size  = string
    #    sku_tier                     = string
    maximum_elastic_worker_count = number
  })
| 
{
  "always_on": true,
  "kind": "Linux",
  "maximum_elastic_worker_count": 1,
  "sku_size": "B1"
}
| no | | [fdr\_re\_function\_app\_image\_tag](#input\_fdr\_re\_function\_app\_image\_tag) | FdR RE to Datastore function app docker image tag. Defaults to 'latest' | `string` | `"latest"` | no | -| [fdr\_re\_function\_autoscale](#input\_fdr\_re\_function\_autoscale) | FdR function autoscaling parameters | 
object({
    default = number
    minimum = number
    maximum = number
  })
| n/a | yes | +| [fdr\_re\_function\_autoscale](#input\_fdr\_re\_function\_autoscale) | FdR function autoscaling parameters | 
object({
    default = number
    minimum = number
    maximum = number
  })
| n/a | yes | | [fdr\_re\_function\_network\_policies\_enabled](#input\_fdr\_re\_function\_network\_policies\_enabled) | Network policies enabled | `bool` | `false` | no | | [fdr\_re\_function\_subnet](#input\_fdr\_re\_function\_subnet) | Address prefixes subnet | `list(string)` | `null` | no | -| [fdr\_xml\_to\_json\_function](#input\_fdr\_xml\_to\_json\_function) | FdR XML to JSON function | 
object({
    always_on                    = bool
    kind                         = string
    sku_size                     = string
    sku_tier                     = string
    maximum_elastic_worker_count = number
  })
| 
{
  "always_on": true,
  "kind": "Linux",
  "maximum_elastic_worker_count": 1,
  "sku_size": "B1",
  "sku_tier": "Basic"
}
| no | +| [fdr\_xml\_to\_json\_function](#input\_fdr\_xml\_to\_json\_function) | FdR XML to JSON function | 
object({
    always_on                    = bool
    kind                         = string
    sku_size                     = string
    sku_tier                     = string
    maximum_elastic_worker_count = number
  })
| 
{
  "always_on": true,
  "kind": "Linux",
  "maximum_elastic_worker_count": 1,
  "sku_size": "B1",
  "sku_tier": "Basic"
}
| no | | [fdr\_xml\_to\_json\_function\_app\_image\_tag](#input\_fdr\_xml\_to\_json\_function\_app\_image\_tag) | FdR XML to JSON function app docker image tag. Defaults to 'latest' | `string` | `"latest"` | no | -| [fdr\_xml\_to\_json\_function\_autoscale](#input\_fdr\_xml\_to\_json\_function\_autoscale) | FdR function autoscaling parameters | 
object({
    default = number
    minimum = number
    maximum = number
  })
| n/a | yes | +| [fdr\_xml\_to\_json\_function\_autoscale](#input\_fdr\_xml\_to\_json\_function\_autoscale) | FdR function autoscaling parameters | 
object({
    default = number
    minimum = number
    maximum = number
  })
| n/a | yes | | [fdr\_xml\_to\_json\_function\_network\_policies\_enabled](#input\_fdr\_xml\_to\_json\_function\_network\_policies\_enabled) | Network policies enabled | `bool` | `false` | no | | [fdr\_xml\_to\_json\_function\_subnet](#input\_fdr\_xml\_to\_json\_function\_subnet) | Address prefixes subnet | `list(string)` | `null` | no | | [fn\_app\_runtime\_version](#input\_fn\_app\_runtime\_version) | Function app runtime version. | `string` | `"~4"` | no | | [ftp\_organization](#input\_ftp\_organization) | Organization configured with FTP | `string` | `null` | no | | [function\_app\_storage\_account\_replication\_type](#input\_function\_app\_storage\_account\_replication\_type) | (Optional) Storage account replication type used for function apps | `string` | `"ZRS"` | no | | [gh\_runner\_job\_location](#input\_gh\_runner\_job\_location) | (Optional) The GH runner container app job location. Consistent with the container app environment location | `string` | `"westeurope"` | no | -| [github](#input\_github) | n/a | 
object({
    org = string
  })
| 
{
  "org": "pagopa"
}
| no | +| [github](#input\_github) | n/a | 
object({
    org = string
  })
| 
{
  "org": "pagopa"
}
| no | | [image\_name](#input\_image\_name) | The image name to use with a function app | `string` | `null` | no | | [image\_tag](#input\_image\_tag) | The image tag to use with a function app | `string` | `null` | no | | [instance](#input\_instance) | One of beta, prod01, prod02 | `string` | n/a | yes | @@ -196,7 +196,7 @@ | [log\_analytics\_workspace\_resource\_group\_name](#input\_log\_analytics\_workspace\_resource\_group\_name) | The name of the resource group in which the Log Analytics workspace is located in. | `string` | n/a | yes | | [monitor\_resource\_group\_name](#input\_monitor\_resource\_group\_name) | Monitor resource group name | `string` | n/a | yes | | [nodo\_pagamenti\_subkey\_required](#input\_nodo\_pagamenti\_subkey\_required) | Enabled subkeys for nodo dei pagamenti api | `bool` | `false` | no | -| [pod\_disruption\_budgets](#input\_pod\_disruption\_budgets) | Pod disruption budget for domain namespace | 
map(object({
    name         = optional(string, null)
    minAvailable = optional(number, null)
    matchLabels  = optional(map(any), {})
  }))
| `{}` | no | +| [pod\_disruption\_budgets](#input\_pod\_disruption\_budgets) | Pod disruption budget for domain namespace | 
map(object({
    name         = optional(string, null)
    minAvailable = optional(number, null)
    matchLabels  = optional(map(any), {})
  }))
| `{}` | no | | [prefix](#input\_prefix) | n/a | `string` | n/a | yes | | [private\_endpoint\_network\_policies\_enabled](#input\_private\_endpoint\_network\_policies\_enabled) | Enables or network policies for private endpoints in Azure. | `bool` | n/a | yes | | [reporting\_fdr\_function\_always\_on](#input\_reporting\_fdr\_function\_always\_on) | Always on property | `bool` | `false` | no | @@ -206,10 +206,10 @@ | [reporting\_fdr\_function\_kind](#input\_reporting\_fdr\_function\_kind) | App service plan kind | `string` | `null` | no | | [reporting\_fdr\_function\_sku\_size](#input\_reporting\_fdr\_function\_sku\_size) | App service plan sku size | `string` | `null` | no | | [reporting\_fdr\_function\_sku\_tier](#input\_reporting\_fdr\_function\_sku\_tier) | App service plan sku tier | `string` | `null` | no | -| [reporting\_fdr\_storage\_account\_info](#input\_reporting\_fdr\_storage\_account\_info) | Storage account | 
object({
    account_kind                      = string
    account_tier                      = string
    account_replication_type          = string
    access_tier                       = string
    advanced_threat_protection_enable = bool
    use_legacy_defender_version       = bool
    public_network_access_enabled     = bool
  })
| 
{
  "access_tier": "Hot",
  "account_kind": "StorageV2",
  "account_replication_type": "LRS",
  "account_tier": "Standard",
  "advanced_threat_protection_enable": true,
  "public_network_access_enabled": false,
  "use_legacy_defender_version": false
}
| no | -| [storage\_account\_info](#input\_storage\_account\_info) | Storage account | 
object({
    account_kind                      = string
    account_tier                      = string
    account_replication_type          = string
    access_tier                       = string
    advanced_threat_protection_enable = bool
    use_legacy_defender_version       = bool
    public_network_access_enabled     = bool
  })
| 
{
  "access_tier": "Hot",
  "account_kind": "StorageV2",
  "account_replication_type": "LRS",
  "account_tier": "Standard",
  "advanced_threat_protection_enable": true,
  "public_network_access_enabled": false,
  "use_legacy_defender_version": false
}
| no | -| [tags](#input\_tags) | n/a | `map(any)` | 
{
  "CreatedBy": "Terraform"
}
| no | -| [tls\_cert\_check\_helm](#input\_tls\_cert\_check\_helm) | tls cert helm chart configuration | 
object({
    chart_version = string,
    image_name    = string,
    image_tag     = string
  })
| n/a | yes | +| [reporting\_fdr\_storage\_account\_info](#input\_reporting\_fdr\_storage\_account\_info) | Storage account | 
object({
    account_kind                      = string
    account_tier                      = string
    account_replication_type          = string
    access_tier                       = string
    advanced_threat_protection_enable = bool
    use_legacy_defender_version       = bool
    public_network_access_enabled     = bool
  })
| 
{
  "access_tier": "Hot",
  "account_kind": "StorageV2",
  "account_replication_type": "LRS",
  "account_tier": "Standard",
  "advanced_threat_protection_enable": true,
  "public_network_access_enabled": false,
  "use_legacy_defender_version": false
}
| no | +| [storage\_account\_info](#input\_storage\_account\_info) | Storage account | 
object({
    account_kind                      = string
    account_tier                      = string
    account_replication_type          = string
    access_tier                       = string
    advanced_threat_protection_enable = bool
    use_legacy_defender_version       = bool
    public_network_access_enabled     = bool
  })
| 
{
  "access_tier": "Hot",
  "account_kind": "StorageV2",
  "account_replication_type": "LRS",
  "account_tier": "Standard",
  "advanced_threat_protection_enable": true,
  "public_network_access_enabled": false,
  "use_legacy_defender_version": false
}
| no | +| [tags](#input\_tags) | n/a | `map(any)` | 
{
  "CreatedBy": "Terraform"
}
| no | +| [tls\_cert\_check\_helm](#input\_tls\_cert\_check\_helm) | tls cert helm chart configuration | 
object({
    chart_version = string,
    image_name    = string,
    image_tag     = string
  })
| n/a | yes | ## Outputs diff --git a/src/domains/fdr-common/README.md b/src/domains/fdr-common/README.md index 5240be09d6..a362e389fe 100644 --- a/src/domains/fdr-common/README.md +++ b/src/domains/fdr-common/README.md @@ -143,9 +143,9 @@ | [cidr\_subnet\_cosmosdb\_fdr](#input\_cidr\_subnet\_cosmosdb\_fdr) | Cosmos DB address space for fdr. | `list(string)` | n/a | yes | | [cidr\_subnet\_flex\_dbms](#input\_cidr\_subnet\_flex\_dbms) | Postgresql network address space. | `list(string)` | n/a | yes | | [cidr\_subnet\_storage\_account](#input\_cidr\_subnet\_storage\_account) | Storage account network address space. | `list(string)` | n/a | yes | -| [cosmos\_mongo\_db\_fdr\_params](#input\_cosmos\_mongo\_db\_fdr\_params) | n/a | 
object({
    enabled        = bool
    capabilities   = list(string)
    offer_type     = string
    server_version = string
    kind           = string
    consistency_policy = object({
      consistency_level       = string
      max_interval_in_seconds = number
      max_staleness_prefix    = number
    })
    main_geo_location_zone_redundant = bool
    enable_free_tier                 = bool
    additional_geo_locations = list(object({
      location          = string
      failover_priority = number
      zone_redundant    = bool
    }))
    private_endpoint_enabled          = bool
    public_network_access_enabled     = bool
    is_virtual_network_filter_enabled = bool
    backup_continuous_enabled         = bool
    enable_serverless                 = bool
    enable_autoscaling                = bool
    throughput                        = number
    max_throughput                    = number
    container_default_ttl             = number
  })
| n/a | yes | -| [cosmos\_mongo\_db\_fdr\_re\_params](#input\_cosmos\_mongo\_db\_fdr\_re\_params) | n/a | 
object({
    capabilities   = list(string)
    offer_type     = string
    server_version = string
    kind           = string
    consistency_policy = object({
      consistency_level       = string
      max_interval_in_seconds = number
      max_staleness_prefix    = number
    })
    main_geo_location_zone_redundant = bool
    enable_free_tier                 = bool
    additional_geo_locations = list(object({
      location          = string
      failover_priority = number
      zone_redundant    = bool
    }))
    private_endpoint_enabled          = bool
    public_network_access_enabled     = bool
    is_virtual_network_filter_enabled = bool
    backup_continuous_enabled         = bool
    enable_serverless                 = bool
    enable_autoscaling                = bool
    throughput                        = number
    max_throughput                    = number
    container_default_ttl             = number
  })
| n/a | yes | -| [custom\_metric\_alerts](#input\_custom\_metric\_alerts) | Map of name = criteria objects | 
map(object({
    # criteria.*.aggregation to be one of [Average Count Minimum Maximum Total]
    aggregation = string
    metric_name = string
    # "Insights.Container/pods" "Insights.Container/nodes"
    metric_namespace = string
    # criteria.0.operator to be one of [Equals NotEquals GreaterThan GreaterThanOrEqual LessThan LessThanOrEqual]
    operator  = string
    threshold = number
    # Possible values are PT1M, PT5M, PT15M, PT30M and PT1H
    frequency = string
    # Possible values are PT1M, PT5M, PT15M, PT30M, PT1H, PT6H, PT12H and P1D.
    window_size = string
    # severity: The severity of this Metric Alert. Possible values are 0, 1, 2, 3 and 4. Defaults to 3.
    severity = number
  }))
| 
{
  "active_connections": {
    "aggregation": "Average",
    "frequency": "PT5M",
    "metric_name": "active_connections",
    "metric_namespace": "Microsoft.DBforPostgreSQL/flexibleServers",
    "operator": "GreaterThan",
    "severity": 2,
    "threshold": 80,
    "window_size": "PT30M"
  },
  "connections_failed": {
    "aggregation": "Total",
    "frequency": "PT5M",
    "metric_name": "connections_failed",
    "metric_namespace": "Microsoft.DBforPostgreSQL/flexibleServers",
    "operator": "GreaterThan",
    "severity": 2,
    "threshold": 80,
    "window_size": "PT30M"
  },
  "cpu_percent": {
    "aggregation": "Average",
    "frequency": "PT5M",
    "metric_name": "cpu_percent",
    "metric_namespace": "Microsoft.DBforPostgreSQL/flexibleServers",
    "operator": "GreaterThan",
    "severity": 2,
    "threshold": 4500,
    "window_size": "PT30M"
  },
  "memory_percent": {
    "aggregation": "Average",
    "frequency": "PT5M",
    "metric_name": "memory_percent",
    "metric_namespace": "Microsoft.DBforPostgreSQL/flexibleServers",
    "operator": "GreaterThan",
    "severity": 2,
    "threshold": 80,
    "window_size": "PT30M"
  },
  "storage_percent": {
    "aggregation": "Average",
    "frequency": "PT5M",
    "metric_name": "storage_percent",
    "metric_namespace": "Microsoft.DBforPostgreSQL/flexibleServers",
    "operator": "GreaterThan",
    "severity": 2,
    "threshold": 80,
    "window_size": "PT30M"
  }
}
| no | +| [cosmos\_mongo\_db\_fdr\_params](#input\_cosmos\_mongo\_db\_fdr\_params) | n/a | 
object({
    enabled        = bool
    capabilities   = list(string)
    offer_type     = string
    server_version = string
    kind           = string
    consistency_policy = object({
      consistency_level       = string
      max_interval_in_seconds = number
      max_staleness_prefix    = number
    })
    main_geo_location_zone_redundant = bool
    enable_free_tier                 = bool
    additional_geo_locations = list(object({
      location          = string
      failover_priority = number
      zone_redundant    = bool
    }))
    private_endpoint_enabled          = bool
    public_network_access_enabled     = bool
    is_virtual_network_filter_enabled = bool
    backup_continuous_enabled         = bool
    enable_serverless                 = bool
    enable_autoscaling                = bool
    throughput                        = number
    max_throughput                    = number
    container_default_ttl             = number
  })
| n/a | yes | +| [cosmos\_mongo\_db\_fdr\_re\_params](#input\_cosmos\_mongo\_db\_fdr\_re\_params) | n/a | 
object({
    capabilities   = list(string)
    offer_type     = string
    server_version = string
    kind           = string
    consistency_policy = object({
      consistency_level       = string
      max_interval_in_seconds = number
      max_staleness_prefix    = number
    })
    main_geo_location_zone_redundant = bool
    enable_free_tier                 = bool
    additional_geo_locations = list(object({
      location          = string
      failover_priority = number
      zone_redundant    = bool
    }))
    private_endpoint_enabled          = bool
    public_network_access_enabled     = bool
    is_virtual_network_filter_enabled = bool
    backup_continuous_enabled         = bool
    enable_serverless                 = bool
    enable_autoscaling                = bool
    throughput                        = number
    max_throughput                    = number
    container_default_ttl             = number
  })
| n/a | yes | +| [custom\_metric\_alerts](#input\_custom\_metric\_alerts) | Map of name = criteria objects | 
map(object({
    # criteria.*.aggregation to be one of [Average Count Minimum Maximum Total]
    aggregation = string
    metric_name = string
    # "Insights.Container/pods" "Insights.Container/nodes"
    metric_namespace = string
    # criteria.0.operator to be one of [Equals NotEquals GreaterThan GreaterThanOrEqual LessThan LessThanOrEqual]
    operator  = string
    threshold = number
    # Possible values are PT1M, PT5M, PT15M, PT30M and PT1H
    frequency = string
    # Possible values are PT1M, PT5M, PT15M, PT30M, PT1H, PT6H, PT12H and P1D.
    window_size = string
    # severity: The severity of this Metric Alert. Possible values are 0, 1, 2, 3 and 4. Defaults to 3.
    severity = number
  }))
| 
{
  "active_connections": {
    "aggregation": "Average",
    "frequency": "PT5M",
    "metric_name": "active_connections",
    "metric_namespace": "Microsoft.DBforPostgreSQL/flexibleServers",
    "operator": "GreaterThan",
    "severity": 2,
    "threshold": 80,
    "window_size": "PT30M"
  },
  "connections_failed": {
    "aggregation": "Total",
    "frequency": "PT5M",
    "metric_name": "connections_failed",
    "metric_namespace": "Microsoft.DBforPostgreSQL/flexibleServers",
    "operator": "GreaterThan",
    "severity": 2,
    "threshold": 80,
    "window_size": "PT30M"
  },
  "cpu_percent": {
    "aggregation": "Average",
    "frequency": "PT5M",
    "metric_name": "cpu_percent",
    "metric_namespace": "Microsoft.DBforPostgreSQL/flexibleServers",
    "operator": "GreaterThan",
    "severity": 2,
    "threshold": 4500,
    "window_size": "PT30M"
  },
  "memory_percent": {
    "aggregation": "Average",
    "frequency": "PT5M",
    "metric_name": "memory_percent",
    "metric_namespace": "Microsoft.DBforPostgreSQL/flexibleServers",
    "operator": "GreaterThan",
    "severity": 2,
    "threshold": 80,
    "window_size": "PT30M"
  },
  "storage_percent": {
    "aggregation": "Average",
    "frequency": "PT5M",
    "metric_name": "storage_percent",
    "metric_namespace": "Microsoft.DBforPostgreSQL/flexibleServers",
    "operator": "GreaterThan",
    "severity": 2,
    "threshold": 80,
    "window_size": "PT30M"
  }
}
| no | | [dns\_zone\_internal\_prefix](#input\_dns\_zone\_internal\_prefix) | The dns subdomain. | `string` | `null` | no | | [domain](#input\_domain) | n/a | `string` | n/a | yes | | [enable\_iac\_pipeline](#input\_enable\_iac\_pipeline) | If true create the key vault policy to allow used by azure devops iac pipelines. | `bool` | `false` | no | @@ -153,15 +153,15 @@ | [env\_short](#input\_env\_short) | n/a | `string` | n/a | yes | | [external\_domain](#input\_external\_domain) | Domain for delegation | `string` | `null` | no | | [fdr\_convertion\_delete\_retention\_days](#input\_fdr\_convertion\_delete\_retention\_days) | Number of days to retain deleted. | `number` | `30` | no | -| [fdr\_history\_storage\_account](#input\_fdr\_history\_storage\_account) | n/a | 
object({
    account_kind                       = string
    account_tier                       = string
    account_replication_type           = string
    advanced_threat_protection         = bool
    advanced_threat_protection_enabled = bool
    blob_versioning_enabled            = bool
    public_network_access_enabled      = bool
    blob_delete_retention_days         = number
    enable_low_availability_alert      = bool
    backup_enabled                     = optional(bool, false)
    backup_retention                   = optional(number, 0)
  })
| 
{
  "account_kind": "StorageV2",
  "account_replication_type": "LRS",
  "account_tier": "Standard",
  "advanced_threat_protection": true,
  "advanced_threat_protection_enabled": true,
  "backup_enabled": false,
  "backup_retention": 0,
  "blob_delete_retention_days": 30,
  "blob_versioning_enabled": false,
  "enable_low_availability_alert": false,
  "public_network_access_enabled": false
}
| no | +| [fdr\_history\_storage\_account](#input\_fdr\_history\_storage\_account) | n/a | 
object({
    account_kind                       = string
    account_tier                       = string
    account_replication_type           = string
    advanced_threat_protection         = bool
    advanced_threat_protection_enabled = bool
    blob_versioning_enabled            = bool
    public_network_access_enabled      = bool
    blob_delete_retention_days         = number
    enable_low_availability_alert      = bool
    backup_enabled                     = optional(bool, false)
    backup_retention                   = optional(number, 0)
  })
| 
{
  "account_kind": "StorageV2",
  "account_replication_type": "LRS",
  "account_tier": "Standard",
  "advanced_threat_protection": true,
  "advanced_threat_protection_enabled": true,
  "backup_enabled": false,
  "backup_retention": 0,
  "blob_delete_retention_days": 30,
  "blob_versioning_enabled": false,
  "enable_low_availability_alert": false,
  "public_network_access_enabled": false
}
| no | | [fdr\_re\_advanced\_threat\_protection](#input\_fdr\_re\_advanced\_threat\_protection) | Enable contract threat advanced protection | `bool` | `false` | no | | [fdr\_re\_delete\_retention\_days](#input\_fdr\_re\_delete\_retention\_days) | Number of days to retain deleted. | `number` | `30` | no | -| [fdr\_re\_storage\_account](#input\_fdr\_re\_storage\_account) | n/a | 
object({
    account_kind                       = string
    account_tier                       = string
    account_replication_type           = string
    advanced_threat_protection         = bool
    advanced_threat_protection_enabled = bool
    blob_versioning_enabled            = bool
    public_network_access_enabled      = bool
    blob_delete_retention_days         = number
    enable_low_availability_alert      = bool
    backup_enabled                     = optional(bool, false)
    backup_retention                   = optional(number, 0)
  })
| 
{
  "account_kind": "StorageV2",
  "account_replication_type": "LRS",
  "account_tier": "Standard",
  "advanced_threat_protection": true,
  "advanced_threat_protection_enabled": true,
  "backup_enabled": false,
  "backup_retention": 0,
  "blob_delete_retention_days": 30,
  "blob_versioning_enabled": false,
  "enable_low_availability_alert": false,
  "public_network_access_enabled": false
}
| no | +| [fdr\_re\_storage\_account](#input\_fdr\_re\_storage\_account) | n/a | 
object({
    account_kind                       = string
    account_tier                       = string
    account_replication_type           = string
    advanced_threat_protection         = bool
    advanced_threat_protection_enabled = bool
    blob_versioning_enabled            = bool
    public_network_access_enabled      = bool
    blob_delete_retention_days         = number
    enable_low_availability_alert      = bool
    backup_enabled                     = optional(bool, false)
    backup_retention                   = optional(number, 0)
  })
| 
{
  "account_kind": "StorageV2",
  "account_replication_type": "LRS",
  "account_tier": "Standard",
  "advanced_threat_protection": true,
  "advanced_threat_protection_enabled": true,
  "backup_enabled": false,
  "backup_retention": 0,
  "blob_delete_retention_days": 30,
  "blob_versioning_enabled": false,
  "enable_low_availability_alert": false,
  "public_network_access_enabled": false
}
| no | | [fdr\_re\_versioning](#input\_fdr\_re\_versioning) | Enable sa versioning | `bool` | `false` | no | -| [fdr\_storage\_account](#input\_fdr\_storage\_account) | n/a | 
object({
    account_kind                  = string
    account_tier                  = string
    account_replication_type      = string
    advanced_threat_protection    = bool
    blob_versioning_enabled       = bool
    public_network_access_enabled = bool
    blob_delete_retention_days    = number
    enable_low_availability_alert = bool
    backup_enabled                = optional(bool, false)
    backup_retention              = optional(number, 0)
  })
| 
{
  "account_kind": "StorageV2",
  "account_replication_type": "LRS",
  "account_tier": "Standard",
  "advanced_threat_protection": true,
  "backup_enabled": false,
  "backup_retention": 0,
  "blob_delete_retention_days": 30,
  "blob_versioning_enabled": false,
  "enable_low_availability_alert": false,
  "public_network_access_enabled": false
}
| no | +| [fdr\_storage\_account](#input\_fdr\_storage\_account) | n/a | 
object({
    account_kind                  = string
    account_tier                  = string
    account_replication_type      = string
    advanced_threat_protection    = bool
    blob_versioning_enabled       = bool
    public_network_access_enabled = bool
    blob_delete_retention_days    = number
    enable_low_availability_alert = bool
    backup_enabled                = optional(bool, false)
    backup_retention              = optional(number, 0)
  })
| 
{
  "account_kind": "StorageV2",
  "account_replication_type": "LRS",
  "account_tier": "Standard",
  "advanced_threat_protection": true,
  "backup_enabled": false,
  "backup_retention": 0,
  "blob_delete_retention_days": 30,
  "blob_versioning_enabled": false,
  "enable_low_availability_alert": false,
  "public_network_access_enabled": false
}
| no | | [geo\_replica\_cidr\_subnet\_postgresql](#input\_geo\_replica\_cidr\_subnet\_postgresql) | Address prefixes replica subnet postgresql | `list(string)` | `null` | no | | [geo\_replica\_enabled](#input\_geo\_replica\_enabled) | (Optional) True if geo replica should be active for key data components i.e. PostgreSQL Flexible servers | `bool` | `false` | no | -| [github](#input\_github) | n/a | 
object({
    org = string
  })
| 
{
  "org": "pagopa"
}
| no | +| [github](#input\_github) | n/a | 
object({
    org = string
  })
| 
{
  "org": "pagopa"
}
| no | | [ingress\_load\_balancer\_ip](#input\_ingress\_load\_balancer\_ip) | n/a | `string` | n/a | yes | | [instance](#input\_instance) | One of beta, prod01, prod02 | `string` | n/a | yes | | [k8s\_kube\_config\_path\_prefix](#input\_k8s\_kube\_config\_path\_prefix) | n/a | `string` | `"~/.kube"` | no | @@ -173,13 +173,13 @@ | [log\_analytics\_workspace\_resource\_group\_name](#input\_log\_analytics\_workspace\_resource\_group\_name) | The name of the resource group in which the Log Analytics workspace is located in. | `string` | n/a | yes | | [monitor\_resource\_group\_name](#input\_monitor\_resource\_group\_name) | Monitor resource group name | `string` | n/a | yes | | [pgres\_flex\_fdr\_db\_name](#input\_pgres\_flex\_fdr\_db\_name) | FdR DB name | `string` | `"fdr"` | no | -| [pgres\_flex\_params](#input\_pgres\_flex\_params) | Postgres Flexible | 
object({
    sku_name                               = string
    db_version                             = string
    storage_mb                             = string
    zone                                   = number
    standby_zone                           = optional(number, 1)
    backup_retention_days                  = number
    geo_redundant_backup_enabled           = bool
    create_mode                            = string
    pgres_flex_private_endpoint_enabled    = bool
    pgres_flex_ha_enabled                  = bool
    pgres_flex_pgbouncer_enabled           = bool
    pgres_flex_diagnostic_settings_enabled = bool
    alerts_enabled                         = bool
    max_connections                        = number
    pgbouncer_min_pool_size                = number
    max_worker_process                     = number
    wal_level                              = string
    shared_preoload_libraries              = string
    public_network_access_enabled          = bool
  })
| n/a | yes | +| [pgres\_flex\_params](#input\_pgres\_flex\_params) | Postgres Flexible | 
object({
    sku_name                               = string
    db_version                             = string
    storage_mb                             = string
    zone                                   = number
    standby_zone                           = optional(number, 1)
    backup_retention_days                  = number
    geo_redundant_backup_enabled           = bool
    create_mode                            = string
    pgres_flex_private_endpoint_enabled    = bool
    pgres_flex_ha_enabled                  = bool
    pgres_flex_pgbouncer_enabled           = bool
    pgres_flex_diagnostic_settings_enabled = bool
    alerts_enabled                         = bool
    max_connections                        = number
    pgbouncer_min_pool_size                = number
    max_worker_process                     = number
    wal_level                              = string
    shared_preoload_libraries              = string
    public_network_access_enabled          = bool
  })
| n/a | yes | | [postgres\_dns\_registration\_enabled](#input\_postgres\_dns\_registration\_enabled) | (Optional) If true, adds a CNAME record for the database FQDN in the db private dns | `bool` | `false` | no | | [postgres\_dns\_registration\_virtual\_endpoint\_enabled](#input\_postgres\_dns\_registration\_virtual\_endpoint\_enabled) | (Optional) If true, adds a CNAME record for the database VE in the db private dns | `bool` | `false` | no | | [prefix](#input\_prefix) | n/a | `string` | n/a | yes | | [reporting\_fdr\_blobs\_retention\_days](#input\_reporting\_fdr\_blobs\_retention\_days) | The number of day for storage\_management\_policy | `number` | `30` | no | -| [reporting\_fdr\_storage\_account](#input\_reporting\_fdr\_storage\_account) | n/a | 
object({
    advanced_threat_protection         = bool
    advanced_threat_protection_enabled = bool
    blob_versioning_enabled            = bool
    blob_delete_retention_days         = number
    account_replication_type           = string
  })
| 
{
  "account_replication_type": "LRS",
  "advanced_threat_protection": false,
  "advanced_threat_protection_enabled": false,
  "blob_delete_retention_days": 30,
  "blob_versioning_enabled": false
}
| no | -| [tags](#input\_tags) | n/a | `map(any)` | 
{
  "CreatedBy": "Terraform"
}
| no | +| [reporting\_fdr\_storage\_account](#input\_reporting\_fdr\_storage\_account) | n/a | 
object({
    advanced_threat_protection         = bool
    advanced_threat_protection_enabled = bool
    blob_versioning_enabled            = bool
    blob_delete_retention_days         = number
    account_replication_type           = string
  })
| 
{
  "account_replication_type": "LRS",
  "advanced_threat_protection": false,
  "advanced_threat_protection_enabled": false,
  "blob_delete_retention_days": 30,
  "blob_versioning_enabled": false
}
| no | +| [tags](#input\_tags) | n/a | `map(any)` | 
{
  "CreatedBy": "Terraform"
}
| no | ## Outputs diff --git a/src/domains/observability/env/uat/terraform.tfvars b/src/domains/observability/env/uat/terraform.tfvars index 0950aea64f..a9f126b197 100644 --- a/src/domains/observability/env/uat/terraform.tfvars +++ b/src/domains/observability/env/uat/terraform.tfvars @@ -359,7 +359,7 @@ ehns_metric_alerts_gpd = { { name = "EntityName" operator = "Include" - values = ["gpd-ingestion.apd.payment_option-tx", "gpd-ingestion.apd.payment_position-tx","gpd-ingestion.apd.transfer-tx"] + values = ["gpd-ingestion.apd.payment_option-tx", "gpd-ingestion.apd.payment_position-tx", "gpd-ingestion.apd.transfer-tx"] } ], }, diff --git a/src/domains/payopt-app/05_subkey.tf b/src/domains/payopt-app/05_subkey.tf index e002ccfc97..807bd24beb 100644 --- a/src/domains/payopt-app/05_subkey.tf +++ b/src/domains/payopt-app/05_subkey.tf @@ -22,13 +22,13 @@ data "azurerm_api_management_user" "user_demo" { count = var.env_short != "p" ? 1 : 0 # DEV -> 99999000001 PSP Signed Direct # UAT -> 99999000011 PSP DEMO - user_id = var.env_short == "u" ? "349fab55-1fe5-4b89-92ac-5bdeabe3010e" : "2d6fe3c6-5656-43c8-afd4-ccf2bb352cec" + user_id = var.env_short == "u" ? "349fab55-1fe5-4b89-92ac-5bdeabe3010e" : "2d6fe3c6-5656-43c8-afd4-ccf2bb352cec" api_management_name = data.azurerm_api_management.apim.name resource_group_name = data.azurerm_api_management.apim.resource_group_name } resource "azurerm_api_management_subscription" "service_payment_options_subkey" { - depends_on = [ data.azurerm_api_management_user.user_demo ] - count = var.env_short != "p" ? 1 : 0 + depends_on = [data.azurerm_api_management_user.user_demo] + count = var.env_short != "p" ? 1 : 0 api_management_name = data.azurerm_api_management.apim.name resource_group_name = data.azurerm_api_management.apim.resource_group_name diff --git a/src/domains/payopt-app/99_variables.tf b/src/domains/payopt-app/99_variables.tf index d2bb30b1e9..0c2a945686 100644 --- a/src/domains/payopt-app/99_variables.tf +++ b/src/domains/payopt-app/99_variables.tf @@ -71,10 +71,10 @@ variable "tags" { variable "is_feature_enabled" { type = object({ - paymentoptions = bool + paymentoptions = bool }) default = { - paymentoptions = false + paymentoptions = false } } ### External resources diff --git a/src/domains/payopt-app/README.md b/src/domains/payopt-app/README.md index 96a8ddb71c..f96ab8ec61 100644 --- a/src/domains/payopt-app/README.md +++ b/src/domains/payopt-app/README.md @@ -57,6 +57,7 @@ | [azurerm_api_management.apim](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/api_management) | data source | | [azurerm_api_management_product.apim_api_config_product](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/api_management_product) | data source | | [azurerm_api_management_product.apim_forwarder_product](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/api_management_product) | data source | +| [azurerm_api_management_user.user_demo](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/api_management_user) | data source | | [azurerm_application_insights.application_insights_italy](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/application_insights) | data source | | [azurerm_client_config.current](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/client_config) | data source | | [azurerm_eventhub_authorization_rule.pagopa_weu_core_evh_ns04_nodo_dei_pagamenti_cache_sync_reader](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/eventhub_authorization_rule) | data source | @@ -88,7 +89,7 @@ | [external\_domain](#input\_external\_domain) | Domain for delegation | `string` | `null` | no | | [ingress\_load\_balancer\_ip](#input\_ingress\_load\_balancer\_ip) | ## Aks | `string` | n/a | yes | | [instance](#input\_instance) | One of beta, prod01, prod02 | `string` | n/a | yes | -| [is\_feature\_enabled](#input\_is\_feature\_enabled) | n/a | 
object({
    paymentoptions      = bool
    paymentoptions_mock = bool
  })
| 
{
  "paymentoptions": false,
  "paymentoptions_mock": false
}
| no | +| [is\_feature\_enabled](#input\_is\_feature\_enabled) | n/a | 
object({
    paymentoptions = bool
  })
| 
{
  "paymentoptions": false
}
| no | | [k8s\_kube\_config\_path\_prefix](#input\_k8s\_kube\_config\_path\_prefix) | n/a | `string` | `"~/.kube"` | no | | [location](#input\_location) | One of westeurope, northeurope | `string` | n/a | yes | | [location\_short](#input\_location\_short) | One of wue, neu | `string` | n/a | yes | diff --git a/src/domains/payopt-app/env/itn-dev/terraform.tfvars b/src/domains/payopt-app/env/itn-dev/terraform.tfvars index ef64184a50..0787a27660 100644 --- a/src/domains/payopt-app/env/itn-dev/terraform.tfvars +++ b/src/domains/payopt-app/env/itn-dev/terraform.tfvars @@ -34,5 +34,5 @@ apim_dns_zone_prefix = "dev.platform" ingress_load_balancer_ip = "10.3.2.250" is_feature_enabled = { - paymentoptions = true + paymentoptions = true } diff --git a/src/domains/payopt-app/env/itn-prod/terraform.tfvars b/src/domains/payopt-app/env/itn-prod/terraform.tfvars index 2417a65fe7..eff33890b2 100644 --- a/src/domains/payopt-app/env/itn-prod/terraform.tfvars +++ b/src/domains/payopt-app/env/itn-prod/terraform.tfvars @@ -34,7 +34,7 @@ apim_dns_zone_prefix = "platform" ingress_load_balancer_ip = "10.3.2.250" is_feature_enabled = { - paymentoptions = true + paymentoptions = true } pod_disruption_budgets = { diff --git a/src/domains/payopt-app/env/itn-uat/terraform.tfvars b/src/domains/payopt-app/env/itn-uat/terraform.tfvars index 0b4163b306..f9fef84f60 100644 --- a/src/domains/payopt-app/env/itn-uat/terraform.tfvars +++ b/src/domains/payopt-app/env/itn-uat/terraform.tfvars @@ -34,5 +34,5 @@ apim_dns_zone_prefix = "uat.platform" ingress_load_balancer_ip = "10.3.2.250" is_feature_enabled = { - paymentoptions = true + paymentoptions = true } diff --git a/src/domains/printit-app/README.md b/src/domains/printit-app/README.md index 8751fa8085..a649ffcd00 100644 --- a/src/domains/printit-app/README.md +++ b/src/domains/printit-app/README.md @@ -255,7 +255,7 @@ No outputs. | [ingress\_load\_balancer\_ip](#input\_ingress\_load\_balancer\_ip) | ## Aks | `string` | n/a | yes | | [instance](#input\_instance) | One of beta, prod01, prod02 | `string` | n/a | yes | | [io\_backend\_base\_path](#input\_io\_backend\_base\_path) | io backend api base path | `string` | `null` | no | -| [is\_feature\_enabled](#input\_is\_feature\_enabled) | n/a | 
object({
    pdf_engine = bool
    printit    = bool
  })
| 
{
  "pdf_engine": false,
  "printit": false
}
| no | +| [is\_feature\_enabled](#input\_is\_feature\_enabled) | n/a | 
object({
    pdf_engine = bool
    printit    = bool
  })
| 
{
  "pdf_engine": false,
  "printit": false
}
| no | | [k8s\_kube\_config\_path\_prefix](#input\_k8s\_kube\_config\_path\_prefix) | n/a | `string` | `"~/.kube"` | no | | [location](#input\_location) | One of westeurope, northeurope | `string` | n/a | yes | | [location\_short](#input\_location\_short) | One of wue, neu | `string` | n/a | yes | @@ -269,9 +269,9 @@ No outputs. | [payment\_wallet\_migrations\_enabled](#input\_payment\_wallet\_migrations\_enabled) | Payment wallet migrations enabled | `bool` | `false` | no | | [payment\_wallet\_with\_pm\_enabled](#input\_payment\_wallet\_with\_pm\_enabled) | payment wallet using Payment Manager | `bool` | `false` | no | | [pdv\_api\_base\_path](#input\_pdv\_api\_base\_path) | Personal data vault api base path | `string` | `null` | no | -| [pod\_disruption\_budgets](#input\_pod\_disruption\_budgets) | Pod disruption budget for domain namespace | 
map(object({
    name         = optional(string, null)
    minAvailable = optional(number, null)
    matchLabels  = optional(map(any), {})
  }))
| `{}` | no | +| [pod\_disruption\_budgets](#input\_pod\_disruption\_budgets) | Pod disruption budget for domain namespace | 
map(object({
    name         = optional(string, null)
    minAvailable = optional(number, null)
    matchLabels  = optional(map(any), {})
  }))
| `{}` | no | | [prefix](#input\_prefix) | n/a | `string` | n/a | yes | -| [tags](#input\_tags) | n/a | `map(any)` | 
{
  "CreatedBy": "Terraform"
}
| no | +| [tags](#input\_tags) | n/a | `map(any)` | 
{
  "CreatedBy": "Terraform"
}
| no | ## Outputs diff --git a/src/elk-monitoring/README.md b/src/elk-monitoring/README.md index b863fcb0ff..27e416cf16 100644 --- a/src/elk-monitoring/README.md +++ b/src/elk-monitoring/README.md @@ -203,11 +203,11 @@ | [apim\_dns\_zone\_prefix](#input\_apim\_dns\_zone\_prefix) | The dns subdomain for apim. | `string` | `null` | no | | [dns\_zone\_internal\_prefix](#input\_dns\_zone\_internal\_prefix) | The dns subdomain. | `string` | `null` | no | | [domain](#input\_domain) | n/a | `string` | n/a | yes | -| [elastic\_cold\_storage](#input\_elastic\_cold\_storage) | n/a | 
object({
    storage_type           = string,
    allow_volume_expansion = bool,
    initialStorageSize     = string
  })
| n/a | yes | -| [elastic\_hot\_storage](#input\_elastic\_hot\_storage) | n/a | 
object({
    storage_type           = string,
    allow_volume_expansion = bool,
    initialStorageSize     = string
  })
| n/a | yes | -| [elastic\_node\_pool](#input\_elastic\_node\_pool) | AKS node pool user configuration | 
object({
    enabled               = bool,
    name                  = string,
    vm_size               = string,
    os_disk_type          = string,
    os_disk_size_gb       = string,
    node_count_min        = number,
    node_count_max        = number,
    node_labels           = map(any),
    node_taints           = list(string),
    node_tags             = map(any),
    elastic_pool_max_pods = number,
  })
| n/a | yes | -| [elastic\_warm\_storage](#input\_elastic\_warm\_storage) | n/a | 
object({
    storage_type           = string,
    allow_volume_expansion = bool,
    initialStorageSize     = string
  })
| n/a | yes | -| [elk\_snapshot\_sa](#input\_elk\_snapshot\_sa) | n/a | 
object({
    blob_delete_retention_days = number
    backup_enabled             = bool
    blob_versioning_enabled    = bool
    advanced_threat_protection = bool
  })
| 
{
  "advanced_threat_protection": true,
  "backup_enabled": false,
  "blob_delete_retention_days": 0,
  "blob_versioning_enabled": true
}
| no | +| [elastic\_cold\_storage](#input\_elastic\_cold\_storage) | n/a | 
object({
    storage_type           = string,
    allow_volume_expansion = bool,
    initialStorageSize     = string
  })
| n/a | yes | +| [elastic\_hot\_storage](#input\_elastic\_hot\_storage) | n/a | 
object({
    storage_type           = string,
    allow_volume_expansion = bool,
    initialStorageSize     = string
  })
| n/a | yes | +| [elastic\_node\_pool](#input\_elastic\_node\_pool) | AKS node pool user configuration | 
object({
    enabled               = bool,
    name                  = string,
    vm_size               = string,
    os_disk_type          = string,
    os_disk_size_gb       = string,
    node_count_min        = number,
    node_count_max        = number,
    node_labels           = map(any),
    node_taints           = list(string),
    node_tags             = map(any),
    elastic_pool_max_pods = number,
  })
| n/a | yes | +| [elastic\_warm\_storage](#input\_elastic\_warm\_storage) | n/a | 
object({
    storage_type           = string,
    allow_volume_expansion = bool,
    initialStorageSize     = string
  })
| n/a | yes | +| [elk\_snapshot\_sa](#input\_elk\_snapshot\_sa) | n/a | 
object({
    blob_delete_retention_days = number
    backup_enabled             = bool
    blob_versioning_enabled    = bool
    advanced_threat_protection = bool
  })
| 
{
  "advanced_threat_protection": true,
  "backup_enabled": false,
  "blob_delete_retention_days": 0,
  "blob_versioning_enabled": true
}
| no | | [enable\_iac\_pipeline](#input\_enable\_iac\_pipeline) | If true create the key vault policy to allow used by azure devops iac pipelines. | `bool` | `false` | no | | [env](#input\_env) | n/a | `string` | n/a | yes | | [env\_short](#input\_env\_short) | n/a | `string` | n/a | yes | @@ -224,14 +224,14 @@ | [log\_analytics\_workspace\_name](#input\_log\_analytics\_workspace\_name) | Specifies the name of the Log Analytics Workspace. | `string` | n/a | yes | | [log\_analytics\_workspace\_resource\_group\_name](#input\_log\_analytics\_workspace\_resource\_group\_name) | The name of the resource group in which the Log Analytics workspace is located in. | `string` | n/a | yes | | [monitor\_resource\_group\_name](#input\_monitor\_resource\_group\_name) | Monitor resource group name | `string` | n/a | yes | -| [nginx\_helm](#input\_nginx\_helm) | nginx ingress helm chart configuration | 
object({
    version = string,
    controller = object({
      image = object({
        registry     = string,
        image        = string,
        tag          = string,
        digest       = string,
        digestchroot = string,
      }),
      config = object({
        proxy-body-size : string
      })
    })
  })
| n/a | yes | -| [nodeset\_config](#input\_nodeset\_config) | n/a | 
map(object({
    count            = string
    roles            = list(string)
    storage          = string
    storageClassName = string
    requestMemory    = string
    requestCPU       = string
    limitsMemory     = string
    limitsCPU        = string
  }))
| 
{
  "default": {
    "count": 1,
    "limitsCPU": "1",
    "limitsMemory": "2Gi",
    "requestCPU": "1",
    "requestMemory": "2Gi",
    "roles": [
      "master",
      "data",
      "data_content",
      "data_hot",
      "data_warm",
      "data_cold",
      "data_frozen",
      "ingest",
      "ml",
      "remote_cluster_client",
      "transform"
    ],
    "storage": "5Gi",
    "storageClassName": "standard"
  }
}
| no | -| [opentelemetry\_operator\_helm](#input\_opentelemetry\_operator\_helm) | open-telemetry/opentelemetry-operator helm chart configuration | 
object({
    chart_version = string,
    values_file   = string
  })
| n/a | yes | +| [nginx\_helm](#input\_nginx\_helm) | nginx ingress helm chart configuration | 
object({
    version = string,
    controller = object({
      image = object({
        registry     = string,
        image        = string,
        tag          = string,
        digest       = string,
        digestchroot = string,
      }),
      config = object({
        proxy-body-size : string
      })
    })
  })
| n/a | yes | +| [nodeset\_config](#input\_nodeset\_config) | n/a | 
map(object({
    count            = string
    roles            = list(string)
    storage          = string
    storageClassName = string
    requestMemory    = string
    requestCPU       = string
    limitsMemory     = string
    limitsCPU        = string
  }))
| 
{
  "default": {
    "count": 1,
    "limitsCPU": "1",
    "limitsMemory": "2Gi",
    "requestCPU": "1",
    "requestMemory": "2Gi",
    "roles": [
      "master",
      "data",
      "data_content",
      "data_hot",
      "data_warm",
      "data_cold",
      "data_frozen",
      "ingest",
      "ml",
      "remote_cluster_client",
      "transform"
    ],
    "storage": "5Gi",
    "storageClassName": "standard"
  }
}
| no | +| [opentelemetry\_operator\_helm](#input\_opentelemetry\_operator\_helm) | open-telemetry/opentelemetry-operator helm chart configuration | 
object({
    chart_version = string,
    values_file   = string
  })
| n/a | yes | | [prefix](#input\_prefix) | n/a | `string` | n/a | yes | | [snapshot\_storage\_replication\_type](#input\_snapshot\_storage\_replication\_type) | (Optional) ELK snapshot storage replication type | `string` | `"LRS"` | no | | [subscription\_name](#input\_subscription\_name) | Subscription name | `string` | n/a | yes | -| [tags](#input\_tags) | n/a | `map(any)` | 
{
  "CreatedBy": "Terraform"
}
| no | -| [tls\_cert\_check\_helm](#input\_tls\_cert\_check\_helm) | tls cert helm chart configuration | 
object({
    chart_version = string,
    image_name    = string,
    image_tag     = string
  })
| n/a | yes | +| [tags](#input\_tags) | n/a | `map(any)` | 
{
  "CreatedBy": "Terraform"
}
| no | +| [tls\_cert\_check\_helm](#input\_tls\_cert\_check\_helm) | tls cert helm chart configuration | 
object({
    chart_version = string,
    image_name    = string,
    image_tag     = string
  })
| n/a | yes | ## Outputs