cloud-foundation-fabric/fast/stages/2-networking-d-separate-envs/dns-dev.tf

/**
 * Copyright 2022 Google LLC
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

# tfdoc:file:description Development spoke DNS zones and peerings setup.

# GCP-specific environment zone

module "dev-dns-private-zone" {
  source          = "../../../modules/dns"
  project_id      = module.dev-spoke-project.project_id
  type            = "private"
  name            = "dev-gcp-example-com"
  domain          = "dev.gcp.example.com."
  client_networks = [module.dev-spoke-vpc.self_link]
  recordsets = {
    "A localhost" = { records = ["127.0.0.1"] }
  }
}

module "dev-onprem-example-dns-forwarding" {
  source          = "../../../modules/dns"
  project_id      = module.dev-spoke-project.project_id
  type            = "forwarding"
  name            = "example-com"
  domain          = "onprem.example.com."
  client_networks = [module.dev-spoke-vpc.self_link]
  forwarders      = { for ip in var.dns.dev : ip => null }
}

module "dev-reverse-10-dns-forwarding" {
  source          = "../../../modules/dns"
  project_id      = module.dev-spoke-project.project_id
  type            = "forwarding"
  name            = "root-reverse-10"
  domain          = "10.in-addr.arpa."
  client_networks = [module.dev-spoke-vpc.self_link]
  forwarders      = { for ip in var.dns.dev : ip => null }
}

# Google APIs

module "dev-googleapis-private-zone" {
  source          = "../../../modules/dns"
  project_id      = module.dev-spoke-project.project_id
  type            = "private"
  name            = "googleapis-com"
  domain          = "googleapis.com."
  client_networks = [module.dev-spoke-vpc.self_link]
  recordsets = {
    "A private" = { records = [
      "199.36.153.8", "199.36.153.9", "199.36.153.10", "199.36.153.11"
    ] }
    "A restricted" = { records = [
      "199.36.153.4", "199.36.153.5", "199.36.153.6", "199.36.153.7"
    ] }
    "CNAME *" = { records = ["private.googleapis.com."] }
  }
}

module "dev-gcrio-private-zone" {
  source          = "../../../modules/dns"
  project_id      = module.dev-spoke-project.project_id
  type            = "private"
  name            = "gcr-io"
  domain          = "gcr.io."
  client_networks = [module.dev-spoke-vpc.self_link]
  recordsets = {
    "A gcr.io." = { ttl = 300, records = [
      "199.36.153.8", "199.36.153.9", "199.36.153.10", "199.36.153.11"
    ] }
    "CNAME *" = { ttl = 300, records = ["private.googleapis.com."] }
  }
}

module "dev-packages-private-zone" {
  source          = "../../../modules/dns"
  project_id      = module.dev-spoke-project.project_id
  type            = "private"
  name            = "packages-cloud"
  domain          = "packages.cloud.google.com."
  client_networks = [module.dev-spoke-vpc.self_link]
  recordsets = {
    "A packages.cloud.google.com." = { ttl = 300, records = [
      "199.36.153.8", "199.36.153.9", "199.36.153.10", "199.36.153.11"
    ] }
    "CNAME *" = { ttl = 300, records = ["private.googleapis.com."] }
  }
}

module "dev-pkgdev-private-zone" {
  source          = "../../../modules/dns"
  project_id      = module.dev-spoke-project.project_id
  type            = "private"
  name            = "pkg-dev"
  domain          = "pkg.dev."
  client_networks = [module.dev-spoke-vpc.self_link]
  recordsets = {
    "A pkg.dev." = { ttl = 300, records = [
      "199.36.153.8", "199.36.153.9", "199.36.153.10", "199.36.153.11"
    ] }
    "CNAME *" = { ttl = 300, records = ["private.googleapis.com."] }
  }
}

module "dev-pkigoog-private-zone" {
  source          = "../../../modules/dns"
  project_id      = module.dev-spoke-project.project_id
  type            = "private"
  name            = "pki-goog"
  domain          = "pki.goog."
  client_networks = [module.dev-spoke-vpc.self_link]
  recordsets = {
    "A pki.goog." = { ttl = 300, records = [
      "199.36.153.8", "199.36.153.9", "199.36.153.10", "199.36.153.11"
    ] }
    "CNAME *" = { ttl = 300, records = ["private.googleapis.com."] }
  }
}