PAROM-7 - Create hmpps-parom-service-preprod namespace

[James MacBeth (jamesmacbeth-unilink)]

No description provided.

[cloud-platform-actions]

Team name: unilink

• Valid: true

Repository: [https://github.com/ministryofjustice/hmpps-parom-service-ui]

• Public: [true]

[cloud-platform-actions]

There are potential IAM Role and/or policy Changes/additions. Reviewer - If satisfied with the changes/additions - dismiss this request

[Sablu M (sablumiah)]

Terraform Plan Summary

Terraform Plan: 72 to be created, 0 to be destroyed, 0 to be updated, 0 to be replaced and 0 unchanged.

Resources to create:

+ aws_sns_topic_subscription.queue-subscription
+ aws_sqs_queue_policy.queue-policy
+ kubernetes_config_map.rds
+ kubernetes_secret.dlq-secret
+ kubernetes_secret.elasticache_redis
+ kubernetes_secret.hmpps_audit_config
+ kubernetes_secret.queue-secret
+ kubernetes_secret.rds
+ kubernetes_secret.topic-secret
+ module.dead-letter-queue.aws_iam_policy.irsa
+ module.dead-letter-queue.aws_sqs_queue.terraform_queue
+ module.dead-letter-queue.random_id.id
+ module.elasticache_redis.aws_elasticache_replication_group.ec_redis
+ module.elasticache_redis.aws_elasticache_subnet_group.ec_subnet
+ module.elasticache_redis.aws_security_group.ec
+ module.elasticache_redis.random_id.auth_token
+ module.elasticache_redis.random_id.id
+ module.hmpps_template_kotlin.github_actions_environment_variable.namespace_env_var
+ module.hmpps_template_kotlin.github_repository_environment.env
+ module.hmpps_template_kotlin.github_repository_environment_deployment_policy.env["main"]
+ module.hmpps_template_kotlin.kubernetes_secret.application-insights[0]
+ module.hmpps_template_kotlin.kubernetes_secret.kotlin_client_creds[0]
+ module.hmpps_template_kotlin.module.service_account.github_actions_environment_secret.cluster-name["hmpps-parom-service-api.preprod"]
+ module.hmpps_template_kotlin.module.service_account.github_actions_environment_secret.cluster-namespace["hmpps-parom-service-api.preprod"]
+ module.hmpps_template_kotlin.module.service_account.github_actions_environment_secret.serviceaccount-cert["hmpps-parom-service-api.preprod"]
+ module.hmpps_template_kotlin.module.service_account.github_actions_environment_secret.serviceaccount-token["hmpps-parom-service-api.preprod"]
+ module.hmpps_template_kotlin.module.service_account.kubernetes_role.github_actions_role
+ module.hmpps_template_kotlin.module.service_account.kubernetes_role_binding.github-actions-rolebinding
+ module.hmpps_template_kotlin.module.service_account.kubernetes_secret_v1.serviceaccount-token
+ module.hmpps_template_kotlin.module.service_account.kubernetes_service_account.github_actions_serviceaccount
+ module.hmpps_template_kotlin.random_password.session_secret
+ module.hmpps_template_kotlin.time_rotating.weekly
+ module.hmpps_template_typescript.github_actions_environment_variable.namespace_env_var
+ module.hmpps_template_typescript.github_repository_environment.env
+ module.hmpps_template_typescript.github_repository_environment_deployment_policy.env["main"]
+ module.hmpps_template_typescript.kubernetes_secret.application-insights[0]
+ module.hmpps_template_typescript.kubernetes_secret.session_secret[0]
+ module.hmpps_template_typescript.kubernetes_secret.typescript_auth_code[0]
+ module.hmpps_template_typescript.kubernetes_secret.typescript_client_creds[0]
+ module.hmpps_template_typescript.module.service_account.github_actions_environment_secret.cluster-name["hmpps-parom-service-ui.preprod"]
+ module.hmpps_template_typescript.module.service_account.github_actions_environment_secret.cluster-namespace["hmpps-parom-service-ui.preprod"]
+ module.hmpps_template_typescript.module.service_account.github_actions_environment_secret.serviceaccount-cert["hmpps-parom-service-ui.preprod"]
+ module.hmpps_template_typescript.module.service_account.github_actions_environment_secret.serviceaccount-token["hmpps-parom-service-ui.preprod"]
+ module.hmpps_template_typescript.module.service_account.kubernetes_role.github_actions_role
+ module.hmpps_template_typescript.module.service_account.kubernetes_role_binding.github-actions-rolebinding
+ module.hmpps_template_typescript.module.service_account.kubernetes_secret_v1.serviceaccount-token
+ module.hmpps_template_typescript.module.service_account.kubernetes_service_account.github_actions_serviceaccount
+ module.hmpps_template_typescript.random_password.session_secret
+ module.hmpps_template_typescript.time_rotating.weekly
+ module.irsa.kubernetes_service_account.generated_sa
+ module.irsa.module.iam_assumable_role.aws_iam_role.this[0]
+ module.irsa.module.iam_assumable_role.aws_iam_role_policy_attachment.this["audit_queue"]
+ module.irsa.module.iam_assumable_role.aws_iam_role_policy_attachment.this["domain_events_dlq"]
+ module.irsa.module.iam_assumable_role.aws_iam_role_policy_attachment.this["domain_events_queue"]
+ module.irsa.module.iam_assumable_role.aws_iam_role_policy_attachment.this["domain_events_topic"]
+ module.irsa.random_id.id
+ module.queue.aws_iam_policy.irsa
+ module.queue.aws_sqs_queue.terraform_queue
+ module.queue.random_id.id
+ module.rds.aws_db_instance.rds
+ module.rds.aws_db_parameter_group.custom_parameters
+ module.rds.aws_db_subnet_group.db_subnet[0]
+ module.rds.aws_kms_alias.alias[0]
+ module.rds.aws_kms_key.kms[0]
+ module.rds.aws_security_group.rds-sg
+ module.rds.random_id.id
+ module.rds.random_password.password
+ module.rds.random_string.username
+ module.scheduled_downtime_service_account.kubernetes_role.github_actions_role
+ module.scheduled_downtime_service_account.kubernetes_role_binding.github-actions-rolebinding
+ module.scheduled_downtime_service_account.kubernetes_secret_v1.serviceaccount-token
+ module.scheduled_downtime_service_account.kubernetes_service_account.github_actions_serviceaccount

[Sablu M (sablumiah)]

This PR CANNOT be auto approved and requires manual approval from the Cloud Platform team.
Reason:
🕵️‍♂️ Detected changes to K8s YAML files. Manual review needed.
Please raise it in #ask-cloud-platform Slack channel.

[Sablu M (sablumiah)]

Your PR is applying in the build: https://concourse.cloud-platform.service.justice.gov.uk/teams/main/pipelines/environments-live/jobs/apply-namespace-changes-live/builds/23632