Merge pull request #741 from NHSDigital/DTOSS-11652-enable-zone-redundancy-prod-container-apps-environemnt

[DTOSS-11652] - feat(infra): enable zone redundancy for Container App Environment in Production

Author: josielsouzanordcloud

infrastructure/environments/prod/variables.tfvars

@@ -12,3 +12,4 @@ nhs_notify_api_message_batch_url      = "https://api.service.nhs.uk/comms/v1/mes
 allowed_paths                         = ["/notifications/message-status/create"]
 enable_alerting                       = true
 use_apex_domain                       = true
+cae_zone_redundancy_enabled           = true

infrastructure/modules/infra/main.tf

@@ -66,6 +66,7 @@ module "container-app-environment" {
   log_analytics_workspace_id = module.log_analytics_workspace_audit.id
   vnet_integration_subnet_id = module.container_app_subnet.id
   private_dns_zone_rg_name   = "rg-hub-${var.hub}-uks-private-dns-zones"
+  zone_redundancy_enabled    = var.cae_zone_redundancy_enabled
 }
 
 module "app_insights_audit" {

infrastructure/modules/infra/variables.tf

@@ -43,6 +43,11 @@ variable "infra_key_vault_rg" {
   type        = string
 }
 
+variable "cae_zone_redundancy_enabled" {
+  description = "Specifies whether the Container App Environment should be zone redundant."
+  type        = bool
+}
+
 locals {
   hub_vnet_rg_name = "rg-hub-${var.hub}-uks-hub-networking"
 }

infrastructure/terraform/main.tf

@@ -8,15 +8,16 @@ module "infra" {
     azurerm.hub = azurerm.hub
   }
 
-  region               = local.region
-  resource_group_name  = local.resource_group_name
-  infra_key_vault_name = local.infra_key_vault_name
-  infra_key_vault_rg   = local.infra_key_vault_rg
-  app_short_name       = var.app_short_name
-  environment          = var.env_config
-  hub                  = var.hub
-  protect_keyvault     = var.protect_keyvault
-  vnet_address_space   = var.vnet_address_space
+  region                      = local.region
+  resource_group_name         = local.resource_group_name
+  infra_key_vault_name        = local.infra_key_vault_name
+  infra_key_vault_rg          = local.infra_key_vault_rg
+  app_short_name              = var.app_short_name
+  environment                 = var.env_config
+  hub                         = var.hub
+  protect_keyvault            = var.protect_keyvault
+  vnet_address_space          = var.vnet_address_space
+  cae_zone_redundancy_enabled = var.cae_zone_redundancy_enabled
 }
 
 module "shared_config" {

infrastructure/terraform/variables.tf

@@ -117,6 +117,12 @@ variable "enable_entra_id_authentication" {
   default     = false
 }
 
+variable "cae_zone_redundancy_enabled" {
+  description = "Specifies whether the Container App Environment should be zone redundant."
+  type        = bool
+  default     = false
+}
+
 variable "use_apex_domain" {
   description = "Use apex domain for the Front Door endpoint. Set to true for production."
   type        = bool