Start managing report's NS1 CNAME via GuCDK (#1591)

Author: jacobwinch

cdk/bin/cdk.ts

@@ -74,6 +74,7 @@ export const reportPropsCode: ReportProps = {
 	stage: 'CODE',
 	app: 'report',
 	domainName: 'report.notifications.code.dev-guardianapis.com',
+	intermediateCname: 'report.notifications-aws.code.dev-guardianapis.com.',
 	instanceMetricGranularity: '5Minute',
 	loggingStreamParameterName: '/account/services/logging.stream.name.code',
 	minAsgSize: 1,
@@ -87,6 +88,7 @@ export const reportPropsProd: ReportProps = {
 	stage: 'PROD',
 	app: 'report',
 	domainName: 'report.notifications.guardianapis.com',
+	intermediateCname: 'report.notifications-aws.guardianapis.com.',
 	instanceMetricGranularity: '1Minute',
 	loggingStreamParameterName: '/account/services/logging.stream.name',
 	minAsgSize: 3,

cdk/lib/__snapshots__/report.test.ts.snap

@@ -48,6 +48,7 @@ exports[`The Report stack matches the snapshot for CODE 1`] = `
       "GuAccessLoggingBucketParameter",
       "GuApplicationTargetGroup",
       "GuHttpsApplicationListener",
+      "GuCname",
     ],
     "gu:cdk:version": "TEST",
   },
@@ -354,6 +355,18 @@ exports[`The Report stack matches the snapshot for CODE 1`] = `
       },
       "Type": "AWS::Route53::RecordSet",
     },
+    "DnsRecordForReport": {
+      "Properties": {
+        "Name": "report.notifications.code.dev-guardianapis.com",
+        "RecordType": "CNAME",
+        "ResourceRecords": [
+          "report.notifications-aws.code.dev-guardianapis.com.",
+        ],
+        "Stage": "CODE",
+        "TTL": 3600,
+      },
+      "Type": "Guardian::DNS::RecordSet",
+    },
     "DynamoDbAccess14AC0B35": {
       "Properties": {
         "PolicyDocument": {
@@ -1498,6 +1511,7 @@ exports[`The Report stack matches the snapshot for PROD 1`] = `
       "GuAccessLoggingBucketParameter",
       "GuApplicationTargetGroup",
       "GuHttpsApplicationListener",
+      "GuCname",
     ],
     "gu:cdk:version": "TEST",
   },
@@ -1804,6 +1818,18 @@ exports[`The Report stack matches the snapshot for PROD 1`] = `
       },
       "Type": "AWS::Route53::RecordSet",
     },
+    "DnsRecordForReport": {
+      "Properties": {
+        "Name": "report.notifications.guardianapis.com",
+        "RecordType": "CNAME",
+        "ResourceRecords": [
+          "report.notifications-aws.guardianapis.com.",
+        ],
+        "Stage": "PROD",
+        "TTL": 3600,
+      },
+      "Type": "Guardian::DNS::RecordSet",
+    },
     "DynamoDbAccess14AC0B35": {
       "Properties": {
         "PolicyDocument": {

cdk/lib/report.ts

@@ -6,6 +6,7 @@ import { GuVpcParameter } from '@guardian/cdk/lib/constructs/core';
 import { GuLoggingStreamNameParameter } from '@guardian/cdk/lib/constructs/core';
 import { GuDistributionBucketParameter } from '@guardian/cdk/lib/constructs/core';
 import { GuStack } from '@guardian/cdk/lib/constructs/core';
+import { GuCname } from '@guardian/cdk/lib/constructs/dns';
 import { GuAllowPolicy } from '@guardian/cdk/lib/constructs/iam';
 import type { App } from 'aws-cdk-lib';
 import { Tags } from 'aws-cdk-lib';
@@ -18,6 +19,10 @@ export interface ReportProps extends GuStackProps {
 	domainName:
 		| 'report.notifications.guardianapis.com'
 		| 'report.notifications.code.dev-guardianapis.com';
+	// This maps to the DnsRecord resource in Route53; we can remove this complexity as part of the DNS switchover
+	intermediateCname:
+		| 'report.notifications-aws.guardianapis.com.'
+		| 'report.notifications-aws.code.dev-guardianapis.com.';
 	instanceMetricGranularity: '1Minute' | '5Minute';
 	loggingStreamParameterName:
 		| '/account/services/logging.stream.name'
@@ -141,5 +146,14 @@ export class Report extends GuStack {
 			GuLoggingStreamNameParameter.getInstance(this);
 		loggingStreamParameter.allowedValues = [props.loggingStreamParameterName];
 		loggingStreamParameter.default = props.loggingStreamParameterName;
+
+		new GuCname(this, 'DnsRecordForReport', {
+			app,
+			domainName: props.domainName,
+			// For now we are still routing traffic via the intermediate CNAME, which points at the legacy ELB.
+			// To complete the migration, we'll remove this intermediate CNAME and point at playApp.loadBalancer.loadBalancerDnsName.
+			resourceRecord: props.intermediateCname,
+			ttl: Duration.seconds(3600),
+		});
 	}
 }