SPIKE: how to build Module for DNS and certificates on the platform

[davidkelliott]

User Story

As a user, I want to be able to quickly set up DNS for my services

What is the smallest thing we can build that will be useful?

User Type(s)

Developer or engineer user

Value

Make setting up DNS and certificates easier

Questions / Assumptions / Hypothesis

The way to set up DNS and certificates is documented but requires a few different things to work properly which can easily cause trouble for first time users.

• What trouble is caused?
• Why is it only first time users and what are the different things?
• Does this affect other first time set up processes?

If we create a module, we expect that it will make it easier for first time users to create DNS and certificates and require less input from mp engineers to resolve queries.

Definition of done

• module created
• readme has been updated
• user docs have been updated
• Tested in example
• Terratests written and passing
• another team member has reviewed
• tests are green
• UR test OR added to continual research plan

Reference

How to write good user stories

[markgov]

PR Created to create a new repo
#3858

[markgov]

initial code pr on new repo
ministryofjustice/modernisation-platform-terraform-dns-certificates#3

[dms1981]

Definition of done here is maybe a bit big for a spike.

[davidkelliott]

Scenarios:

1. (preferred option) Non production uses mp domains and ACM certificates, production uses delegated hosted zone domain and ACM certificates
2. Non production uses mp domains and ACM certificates, production uses 3rd party DNS forwarded to MP domains and ACM certificates
3. (preferred option if Gandi needed) Non production uses mp domains and ACM certificates, production uses delegated hosted zone domain and Gandi certificates
4. Non production uses uses delegated hosted zone and ACM, production uses delegated hosted zone domain and ACMs certificates
5. Non production uses uses delegated hosted zone and Gandi, production uses delegated hosted zone domain and Gandi certificates

[markgov]

Creating DNS Module #4058 created to continue this ticket

At first i thought this was going to be easy but just getting the dns part to work turned out to be the hardest part but after several iterations i have managed to create a basic module that has the ability to create dns records and i believe i have a path forward to be able to do the dns records but that and further development of the module can be done in the ticket above but for now i have scheduled as to discuss my findings and show my method. and if it worth creating it

[markgov]

We are going to go ahead with this module on the above call but we are not going to include the Gandi support