VED 357 - Old infra and old terraform from release to prod v1.0.2361-alpha+313078 (#624)

Author: robertnovac1

README.md

@@ -39,8 +39,10 @@ See https://nhsd-confluence.digital.nhs.uk/display/APM/Glossary.
 | Folder                | Description |
 |------------------------|-------------|
 | `infra`                | Base infrastructure components. |
+| `infra_old`            | Old infra code used to create INT to mimic prod. |
 | `grafana`              | Terraform configuration for Grafana, built on top of core infra. |
 | `terraform`            | Core Terraform infrastructure code. This is run in each PR and sets up lambdas associated with the PR.|
+| `terraform_old`        | Old tf code used to create INT to mimic prod. |
 | `terraform_sandbox`    | Sandbox environment for testing infrastructure changes. |
 | `terraform_aws_backup` | Streamlined backup processing with AWS. |
 | `mesh-infra`           | Infrastructure setup for Imms batch MESH integration. |

infra_old/.terraform.lock.hcl

@@ -0,0 +1,47 @@
+-include .env
+
+tf_cmd = AWS_PROFILE=$(AWS_PROFILE) terraform
+tf_state= -backend-config="bucket=$(BUCKET_NAME)"
+tf_vars= -var-file=environments/$(ENVIRONMENT)/variables.tfvars
+
+.PHONY: lock-provider workspace init plan apply clean destroy output tf-%
+
+lock-provider:
+	# Run this only when you install a new terraform provider. This will generate sha code in lock file for all platform
+	echo "This may take a while. Be patient!"
+	$(tf_cmd) providers lock -platform=darwin_arm64 -platform=darwin_amd64 -platform=linux_amd64 -platform=windows_amd64
+
+workspace:
+	$(tf_cmd) workspace new $(ENVIRONMENT) || $(tf_cmd) workspace select $(ENVIRONMENT) && echo "Switched to workspace/environment: $(ENVIRONMENT)"
+
+init:
+	$(tf_cmd) init $(tf_state) -upgrade $(tf_vars)
+
+init-reconfigure:
+	$(tf_cmd) init $(tf_state) -upgrade $(tf_vars) -reconfigure
+
+plan: workspace
+	 $(tf_cmd) plan $(tf_vars)
+
+apply: workspace
+	$(tf_cmd) apply $(tf_vars) -auto-approve
+
+clean:
+	rm -rf build .terraform upload-key
+
+destroy: workspace
+	$(tf_cmd) destroy $(tf_vars) -auto-approve
+	$(tf_cmd) workspace select default
+	$(tf_cmd) workspace delete $(ENVIRONMENT)
+
+output:
+ifndef name
+	$(error name variable not set. Use 'make output name=...')
+endif
+	$(tf_cmd) output -raw $(name)
+
+import: 
+	$(tf_cmd) import $(tf_vars) $(to) $(id)
+
+tf-%:
+	$(tf_cmd) $*

infra_old/Makefile

@@ -0,0 +1,2 @@
+## About
+This set of resources is used to set up the new INT environment. It replicates the production environment as of version v1.0.2361-alpha+313078, allowing us to simulate releases for production. Delete this folder once the infrastructure is standardised across all environmnets.

infra_old/README.md

@@ -0,0 +1,52 @@
+resource "aws_dynamodb_table" "audit-table" {
+  name         = "immunisation-batch-int-audit-table"
+  billing_mode = "PAY_PER_REQUEST"
+  hash_key     = "message_id"
+
+  attribute {
+    name = "message_id"
+    type = "S"
+  }
+
+  attribute {
+    name = "filename"
+    type = "S"
+  }
+
+  attribute {
+    name = "queue_name"
+    type = "S"
+  }
+
+  attribute {
+    name = "status"
+    type = "S"
+  }
+
+  global_secondary_index {
+    name            = "filename_index"
+    hash_key        = "filename"
+    projection_type = "ALL"
+  }
+
+  global_secondary_index {
+    name            = "queue_name_index"
+    hash_key        = "queue_name"
+    range_key       = "status"
+    projection_type = "ALL"
+  }
+
+  point_in_time_recovery {
+    enabled = true
+  }
+  server_side_encryption {
+    enabled     = true
+    kms_key_arn = aws_kms_key.dynamodb_encryption.arn
+  }
+
+  tags = {
+    "Environment" = "int"
+    "Project"     = "immunisation"
+    "Service"     = "fhir-api"
+  }
+}

infra_old/audit_db.tf

@@ -0,0 +1,60 @@
+resource "aws_dynamodb_table" "delta-dynamodb-table" {
+  name         = "imms-int-delta"
+  billing_mode = "PAY_PER_REQUEST"
+  hash_key     = "PK"
+  attribute {
+    name = "PK"
+    type = "S"
+  }
+  attribute {
+    name = "DateTimeStamp"
+    type = "S"
+  }
+  attribute {
+    name = "Operation"
+    type = "S"
+  }
+
+  attribute {
+    name = "VaccineType"
+    type = "S"
+  }
+
+  attribute {
+    name = "SupplierSystem"
+    type = "S"
+  }
+
+  ttl {
+    attribute_name = "ExpiresAt"
+    enabled        = true
+  }
+
+  global_secondary_index {
+    name            = "SearchIndex"
+    hash_key        = "Operation"
+    range_key       = "DateTimeStamp"
+    projection_type = "ALL"
+  }
+
+  global_secondary_index {
+    name            = "SecondarySearchIndex"
+    hash_key        = "SupplierSystem"
+    range_key       = "VaccineType"
+    projection_type = "ALL"
+  }
+
+  point_in_time_recovery {
+    enabled = true
+  }
+  server_side_encryption {
+    enabled     = true
+    kms_key_arn = aws_kms_key.dynamodb_encryption.arn
+  }
+
+  tags = {
+    "Environment" = "int"
+    "Project"     = "immunisation"
+    "Service"     = "fhir-api"
+  }
+}