add help centre domain cnames (temporary values for authentication)

.github/workflows/ci.yml

@@ -58,5 +58,14 @@ jobs:
             manage-frontend:
               - ./manage-frontend.zip
 
-
-
+      - name: Upload help centre domain to Riff-Raff
+        uses: guardian/actions-riff-raff@v4
+        with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
+          roleArn: ${{ secrets.GU_RIFF_RAFF_ROLE_ARN }}
+          app: help-centre
+          configPath: ./help-centre/riff-raff.yaml
+          contentDirectories: |
+            cfn:
+              - ./cdk/cdk.out/HelpCentre-CODE.template.json
+              - ./cdk/cdk.out/HelpCentre-PROD.template.json

cdk/bin/cdk.ts

@@ -1,5 +1,6 @@
 import 'source-map-support/register';
 import { App } from 'aws-cdk-lib';
+import { HelpCentre } from '../lib/help-centre';
 import { ManageFrontend } from '../lib/manage-frontend';
 
 const app = new App();
@@ -22,3 +23,7 @@ new ManageFrontend(app, 'ManageFrontend-PROD', {
 	domain: 'manage.theguardian.com.origin.membership.guardianapis.com',
 	cloudFormationStackName: 'support-PROD-manage-frontend',
 });
+
+new HelpCentre(app, 'HelpCentre-CODE', 'CODE');
+
+new HelpCentre(app, 'HelpCentre-PROD', 'PROD');

cdk/lib/help-centre.ts

@@ -0,0 +1,31 @@
+import { GuStack } from '@guardian/cdk/lib/constructs/core';
+import { GuCname } from '@guardian/cdk/lib/constructs/dns/dns-records';
+import type { App } from 'aws-cdk-lib';
+import { Duration } from 'aws-cdk-lib';
+
+export class HelpCentre extends GuStack {
+	constructor(scope: App, id: string, stage: 'CODE' | 'PROD') {
+		super(scope, id, { stack: 'support', stage });
+
+		const app = 'help-centre';
+		const mappings = {
+			CODE: {
+				domainName: 'help.code.dev-theguardian.com',
+				resourceRecord:
+					'help.code.dev-theguardian.com.00d20000000nq5geaa.live.siteforce.com', // temp
+			},
+			PROD: {
+				domainName: 'help.theguardian.com',
+				resourceRecord:
+					'help.theguardian.com.00d20000000nq5geaa.live.siteforce.com', // temp
+			},
+		};
+		const { domainName, resourceRecord } = mappings[stage];
+		new GuCname(this, 'NS1Domain', {
+			app,
+			domainName,
+			resourceRecord,
+			ttl: Duration.minutes(5),
+		});
+	}
+}

help-centre/riff-raff.yaml

@@ -0,0 +1,15 @@
+regions:
+  - eu-west-1
+stacks:
+  - support
+allowedStages:
+  - CODE
+  - PROD
+deployments:
+  cfn:
+    type: cloud-formation
+    app: help-centre
+    parameters:
+      templateStagePaths:
+        CODE: HelpCentre-CODE.template.json
+        PROD: HelpCentre-PROD.template.json