Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Marlowe finance routing #3107

Merged
merged 3 commits into from
May 4, 2021
Merged

Marlowe finance routing #3107

merged 3 commits into from
May 4, 2021

Conversation

gilligan
Copy link
Contributor

@gilligan gilligan commented May 4, 2021

Summary
Configure marlowe-finance.io records and certificates in terraform

Details

  • Add the marlowe-finance.io public hosted zone
  • Configure the load balancer for access via marlowe-finance.io
  • Configure marlowe-finance.io certificates using aws DNS certificates

NOTE: The changes in this PR still rely on some manual changes that still need to be added to terraform in a separate PR:
- CNAME record for play.marlowe-finance.io pointing to the production environment
- CNAME record for run.marlowe-finance.io pointing to the production environment
- A record for marlowe-finance.io pointing to marlowe-web on the production environment


https://marlowe-finance.io/
https://run.marlowe-finance.io/
https://play.marlowe-finance.io/


Pre-submit checklist:

  • Branch
    • Commit sequence broadly makes sense
    • Key commits have useful messages
    • Relevant tickets are mentioned in commit messages
    • Formatting, materialized Nix files, PNG optimization, etc. are updated
  • PR
    • Self-reviewed the diff
    • Useful pull request description
    • Reviewer requested

Pre-merge checklist:

  • Someone approved it
  • Commits have useful messages
  • Review clarifications made it into the code
  • History is moderately tidy; or going to squash-merge

@gilligan gilligan requested a review from palas May 4, 2021 07:58
Copy link
Contributor

@palas palas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@gilligan gilligan force-pushed the marlowe-finance-routing branch from 5e79878 to 34ac60a Compare May 4, 2021 11:00
@gilligan
Copy link
Contributor Author

gilligan commented May 4, 2021

I went ahead and also added the previously missing route53 records configuration for marlowe-finance.io to this PR

gilligan added 3 commits May 4, 2021 14:04
Configure the load balancer to route:

- play.marlowe-finance.io -> production.marlowe.iohkdev.io
- run.marlowe-finance.io -> production.marlowe-dash.iohkdev.io
- marlowe-finance.io -> production.marlowe-web.iohkdev.io

The configuration only includes forwarding based on `host_header`
values and does not configure any certificates.
Configure certificates for *.marlowe-finance.io using route53/DNS record
based aws certificates.
Create marlowe-finance.io resources:

- aws_route53_zone for "marlowe-finance.io"
- aws_route53_record (A) for marlowe-finance.io
- aws_route53_record (CNAME) for "run.marlowe-finance.io"
- aws_route53_record (CNAME) for "play.marlowe-finance.io"

This commit also adds `marlowe_finance_production_ip`, the ip address
of production.marlowe.iohkdev.io, which the A record from above needs
to refer to. Due to the dynamic nature of the terraform configuration
the IP unfortunately has to be hard-coded:

Refering to machines via $env would lead to DNS records being created
for all and any environment getting deployed (alpha, <userX>, ..) but
of course this should only ever be applied for production.
@gilligan gilligan force-pushed the marlowe-finance-routing branch from 34ac60a to 5a546ae Compare May 4, 2021 12:10
@gilligan gilligan merged commit acc7a44 into master May 4, 2021
@kwxm kwxm deleted the marlowe-finance-routing branch June 16, 2021 06:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants