From b988cba954fd4b3957573340bebba3a203478ad8 Mon Sep 17 00:00:00 2001 From: decfox Date: Wed, 15 May 2024 14:08:57 +0530 Subject: [PATCH 1/3] feat: destroy quic.ooni.org domain --- tf/environments/prod/dns_records.tf | 8 -------- 1 file changed, 8 deletions(-) diff --git a/tf/environments/prod/dns_records.tf b/tf/environments/prod/dns_records.tf index cc2467e0..3129e44d 100644 --- a/tf/environments/prod/dns_records.tf +++ b/tf/environments/prod/dns_records.tf @@ -302,14 +302,6 @@ resource "aws_route53_record" "prometheus-ooni-org-_CNAME_" { zone_id = local.dns_root_zone_ooni_org } -resource "aws_route53_record" "quic-ooni-org-_A_" { - name = "quic.ooni.org" - records = ["167.99.36.132"] - ttl = "1799" - type = "A" - zone_id = local.dns_root_zone_ooni_org -} - resource "aws_route53_record" "run-ooni-org-_CNAME_" { name = "run.ooni.org" records = ["cname.vercel-dns.com"] From 6b487bc313cb2fcba11d8dba150c766fe4dac3b2 Mon Sep 17 00:00:00 2001 From: decfox Date: Wed, 15 May 2024 14:26:32 +0530 Subject: [PATCH 2/3] convert codesign_box module to noop --- tf/modules/cloudhsm/main.tf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/tf/modules/cloudhsm/main.tf b/tf/modules/cloudhsm/main.tf index 02d2230b..cddcf489 100644 --- a/tf/modules/cloudhsm/main.tf +++ b/tf/modules/cloudhsm/main.tf @@ -79,4 +79,8 @@ resource "aws_instance" "codesign_box" { EOF tags = merge(var.tags, { Name = "codesign-box" }) + + lifecycle { + ignore_changes = all + } } From 10d9cf13f2af5712d29ca167ae0ad896cf834218 Mon Sep 17 00:00:00 2001 From: decfox Date: Wed, 15 May 2024 14:30:16 +0530 Subject: [PATCH 3/3] add note for ignore_changes ruke --- tf/modules/cloudhsm/main.tf | 1 + 1 file changed, 1 insertion(+) diff --git a/tf/modules/cloudhsm/main.tf b/tf/modules/cloudhsm/main.tf index cddcf489..97f71822 100644 --- a/tf/modules/cloudhsm/main.tf +++ b/tf/modules/cloudhsm/main.tf @@ -80,6 +80,7 @@ resource "aws_instance" "codesign_box" { tags = merge(var.tags, { Name = "codesign-box" }) + // NOTE: remove the ignore_changes rule to deploy lifecycle { ignore_changes = all }