cds-snc / dns Goto Github PK

Provide at least a simple version of the README in French

Requesting a domain for worksite.alpha.canada.ca to support the TBS OCIO team with a prototype application.

As asked in cds-snc/notification-api#1117 (comment)

I've got access to the appropriate Route 53 zone. Searched for _dmarc and there are 3 TXT records to update in production. I can do these changes myself from the console or someone can double-check.

Hello,

In order to bind the custom domain to the PowerApps application - gcr2wp-non-cpa-dev.powerappsportals.com - a temporary update to a CNAME record that points to worksite.alpha.canada.ca to gcr2wp-non-cpa-dev.powerappsportals.com is required.

Once the domain is verified, we can change it back to an A record to 20.104.121.246.

Thanks om advance.

Regards,
Po

Added new domain itap-piem.alpha-canada.ca for PHAC.

#267

Setup OIDC roles so that we can allow external contributors to run plans against this repo (when PR's are approved).

We need two OIDC roles

• Apply (needs the ability to work with DNS)
• Plan (needs read access to DNS)

Potential tools we can use to do this:

https://github.com/iann0036/iamlive
https://github.com/salesforce/policy_sentry/
https://github.com/Netflix/consoleme

To link to #172 after our email exchange.

This is for Sign In Canada development and testing.

Contact information: [email protected] / [email protected]

Nameserver records:

id.alpha.canada.ca IN NS ns1-08.azure-dns.com.
id.alpha.canada.ca IN NS ns2-08.azure-dns.net.
id.alpha.canada.ca IN NS ns3-08.azure-dns.org.
id.alpha.canada.ca IN NS ns4-08.azure-dns.info.

Thanks!

 resource "aws_route53_record" "api-notification-alpha-canada-ca-A" {
        zone_id = aws_route53_zone.alpha-canada-ca-public.zone_id
        name    = "dmarc-reports.alpha.canada.ca"
        type    = "CNAME"
        records = [
              "dmarc-report-api-brpuw6ogca-nn.a.run.app"
        ]
        ttl     = "300"
  }

Please and thank you.

Please remove the worksite.alpha.canada.ca as it is no longer required nor being used.

resource "aws_route53_record" "cra-arc-alpha-canada-ca-NS" {
  zone_id = aws_route53_zone.alpha-canada-ca-public.zone_id
  name    = "cra-arc.alpha.canada.ca"
  type    = "NS"
  records = [
    "ns1-06.azure-dns.com",
    "ns2-06.azure-dns.net",
    "ns3-06.azure-dns.org",
    "ns4-06.azure-dns.info"
  ]
  ttl = "300"
}

In order for Microsoft to authorize use of the cra-arc.alpha.canada.ca domain name with Azure Active Directory for Canada Revenue Agency - Agence du revenue Canada, we need to add a DNS entry for it.
   
    In order to verify cra-arc.alpha.canada.ca, we need to add the following TXT record for cra-arc.alpha.canada.ca with the domain registrar or in Azure DNS records:
   
    Alias or host name: @
    Destination or points to address: MS=ms25509347
    TTL: 3600
   
    If your domain registrar for cra-arc.alpha.canada.ca does not allow TXT records, as an alternative you can add the following MX record:
   
    Alias or host name: @
    Destination or points to address: ms25509347.msv1.invalid
    TTL: 3600
    Priority: 32767
   
    Please let me know once the DNS entry has been added. From there I can unblock our use of cra-arc.alpha.canada.ca with Azure AD by completing the verification process for the domain name.
   
    Thank you.
cc/ @HamzaAburaneh, @obrien-j

#245

To verify domain ownership on Netlify, add TXT record for Netlify support team.

The Tracker project is no longer using the pulse domain and would like to have it removed.

Thanks

We should update to the latest version of TF as there are some breaking changes between our TF and the latest version.

Useful Docs for this task:
https://www.terraform.io/upgrade-guides/0-13.html

And Providers are handled differently in TF as of v0.13 please see the following:
https://www.terraform.io/docs/configuration/provider-requirements.html#best-practices-for-provider-versions

Value to be: opscim.cds-snc.ca

Can we please revert back to CNAME record and use the following domain [email protected]. We will then need to change it to A record after we bind the certificate to the portal.

0.13.6 is just way to old

Can we transition this repo to using main as the primary branch name? Do we know if there are processes outside of this repository that refer to the branch name? If so, what are they?

• "aws_route53_record" "a11y-cds-snc-ca-CNAME" a11y.cds-snc.ca/
• "aws_route53_record" "alpha-cds-snc-ca-ns" alpha.cds-snc.ca
• "aws_route53_record" "benefits-avantages-cds-snc-ca-CNAME" benefits-avantages.cds-snc.ca
• "aws_route53_record" "ebrief-cds-snc-ca-A" brief-bref.cds-snc.ca
• "aws_route53_record" "impact-cds-snc-ca-TXT" impact.cds-snc.ca
• "aws_route53_record" "nrcan-energuide-poc-cds-snc-ca-A" nrcan-energuide-poc.cds-snc.ca
• "aws_route53_record" "nrcanapi-cds-snc-ca-A" nrcanapi.cds-snc.ca
• "aws_route53_record" "report-a-scam-cds-snc-ca-CNAME" report-a-scam.cds-snc.ca
• "aws_route53_record" "signalez-un-crime-informatique-cds-snc-ca-CNAME" "signalez-un-crime-informatique.cds-snc.ca"
• "aws_route53_record" "service-dashboard-cds-snc-ca-A" service-dashboard.cds-snc.ca
• "aws_route53_record" "tell-us-cds-snc-ca-A" tell-us.cds-snc.ca
• "aws_route53_record" "racontez-nous-cds-snc-ca-A" racontez-nous.cds-snc.ca
• "aws_route53_record" "vac-benefits-finder-cds-snc-ca-A" vac-benefits-finder.cds-snc.ca

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Pending Approval

These branches will be created by Renovate only once you click their checkbox below.

• chore(deps): update terraform aws to v5

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): lock file maintenance

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

Would it be possible to create the following domains with the zone delegation:

cse-cst.alpha.canada.ca:

• ns1-07.azure-dns.com.
• ns2-07.azure-dns.net.
• ns3-07.azure-dns.org.
• ns4-07.azure-dns.info.

cyber.alpha.canada.ca

• ns1-03.azure-dns.com.
• ns2-03.azure-dns.net.
• ns3-03.azure-dns.org.
• ns4-03.azure-dns.info.

Thanks

Figure out a way to have dns repo PR's create a dns record in a 'secondary' ns record set, that isn't published, but allows us to test what it would look like. Case in point, recent alpha.canada.ca PR, once fixed and deployed, the site itself is not using HTTPS... would be nice to catch that before it goes live into production.

Request for gcpulse.tbs.alpha.canada.ca to be allocated for TBS' tracker2.0 testing purposes

Documentation: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/guides/version-3-upgrade

Hey there!

I found a typo in my previous request.

Can #290 be merged in?

Request for opencall-appelouvert.alpha.canada.ca to support the CDR team.

The readme for this project, especially as it pertains relevant information for folks trying to leverage the 'service', needs to be both improved to provide clear direction on how to get a request in, the constraints, and more specifally, it needs to be bilingual.

Done when

[] Content has been reviewed by @sboots and ideally a content designer
[] Content has been reviewed by a 'user' (Po Tea-Duncan) outside CDS, and they have submitted a new domain request.
[] Content is translated and PR merged.

I came across a CDS DMARC record that is directing forensic reports to the Cyber Centre, but couldn't find the record in this repo: https://emailstuff.org/dmarc/check/qe0e6xs.m.notification.alpha.canada.ca

Please amend this record to remove the ruf=mailto:[email protected] portion.

Requesting a domain for workplace.alpha.canada.ca to support the TBS OCIO team with a prototype application.

#241

Update design.alpha.canada.ca CNAME to point to hosted documentation site (https://gallant-bassi-851d24.netlify.app/) on Netlify.

Two requests for a home for https://github.com/cds-snc/covid-healthcare-portal

• covid-alert-portal.alpha.canada.ca
• portail-alerte-covid.alpha.canada.ca

Add new domain for design-system.alpha.canada.ca/systeme-design.alpha.canada.ca.

#317