Merge pull request #1243 from DFE-Digital/2131-rsm-migrate-domains-to…

…-s189-ip-restriction Allowing IP restriction for RSM apps as part of RSM migration activity
DFE-Digital · Nov 25, 2024 · 7cf4dc6 · 7cf4dc6
2 parents d45bb3d + 45879cd
commit 7cf4dc6
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 22 deletions.
diff --git a/terraform/.terraform.lock.hcl b/terraform/.terraform.lock.hcl
diff --git a/terraform/app.tf b/terraform/app.tf
@@ -137,28 +137,8 @@ resource "azurerm_linux_web_app" "rsm-app" {
     minimum_tls_version = "1.2"
     health_check_path   = "/health"
 
-    ip_restriction_default_action     = "Deny"
-    scm_ip_restriction_default_action = "Deny"
-
-    dynamic "ip_restriction" {
-      for_each = var.domain != null ? [1] : []
-
-      content {
-        name     = "FrontDoor"
-        action   = "Allow"
-        priority = 1
-        headers = [{
-          x_azure_fdid      = try([local.infrastructure_secrets.FRONTDOOR_ID], [])
-          x_fd_health_probe = []
-          x_forwarded_for   = []
-          x_forwarded_host  = []
-        }]
-        service_tag               = "AzureFrontDoor.Backend"
-        ip_address                = null
-        virtual_network_subnet_id = null
-
-      }
-    }
+    ip_restriction_default_action     = "Allow"
+    scm_ip_restriction_default_action = "Allow"
   }
 
   app_settings = local.rsm_env_vars

diff --git a/terraform/domains/environment_domains/vendor/modules/domains b/terraform/domains/environment_domains/vendor/modules/domains
diff --git a/terraform/domains/infrastructure/vendor/modules/domains b/terraform/domains/infrastructure/vendor/modules/domains