[#IOPID-2557] Import Lollipop OPEX dashboard (#149)

Co-authored-by: Salvatore Laiso <[email protected]>

.github/opex_filters.yaml

@@ -1,8 +1,10 @@
 plan-action:
   - ".github/workflows/pr_opex_api_session_manager.yaml"
+  - ".github/workflows/pr_opex_api_lollipop.yaml"
   - ".github/workflows/call_pr_opex_api.yml"
 apply-action:
   - ".github/workflows/opex_api_session_manager.yaml"
+  - ".github/workflows/opex_api_lollipop.yaml"
   - ".github/workflows/call_opex_api.yml"
 bpd:
   - "apps/io-session-manager/api/bpd.yaml"
@@ -25,3 +27,6 @@ public:
 zendesk:
   - "apps/io-session-manager/api/zendesk.yaml"
   - "apps/io-session-manager/.opex/zendesk/**"
+lollipop-external:
+  - "apps/io-lollipop/api/external.yaml"
+  - "apps/io-lollipop/.opex/external/**"

.github/workflows/opex_api_lollipop.yaml

@@ -0,0 +1,47 @@
+name: Opex Dashboard Lollipop
+
+on:
+  push:
+    branches:
+      - main
+    paths:      
+      - ".github/workflows/opex_api_lollipop.yaml"
+      - ".github/workflows/call_opex_api.yml"
+      - "apps/io-lollipop/api/*.yaml"
+      - "apps/io-lollipop/.opex/**"
+
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}
+
+jobs:
+  filter:
+    runs-on: ubuntu-22.04
+    permissions:
+      pull-requests: read
+    outputs:
+      apply-action: ${{ steps.filter.outputs.apply-action }}
+      lollipop-external: ${{ steps.filter.outputs.lollipop-external }}
+    # Checks to see if openapi specs in the PR match one of the ones listed.
+    # We can use the result to decide which job to run
+    # With this type of filter we can avoid creating a lot of workflow files
+    steps:
+      # path-filters action requires checkout with push event
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 20
+      - uses: dorny/[email protected]
+        id: filter
+        with:
+          filters: ./.github/opex_filters.yaml
+
+  apply-lollipop-external:
+    needs: filter
+    if: ${{ needs.filter.outputs.lollipop-external == 'true' || needs.filter.outputs.apply-action == 'true' }}
+    uses: ./.github/workflows/call_opex_api.yml
+    name: (Lollipop - External) Apply changes to Production
+    secrets: inherit
+    with:
+      api_name: external
+      app_name: io-lollipop

.github/workflows/pr_opex_api_lollipop.yaml

@@ -0,0 +1,49 @@
+name: PR - Opex Dashboard Lollipop
+
+on:
+  pull_request:
+    types:
+      - opened
+      - edited
+      - synchronize
+      - reopened
+    branches:
+      - main
+    paths:
+      - ".github/workflows/pr_opex_api_lollipop.yaml"
+      - ".github/workflows/call_pr_opex_api.yml"
+      - "apps/io-lollipop/api/*.yaml"
+      - "apps/io-lollipop/.opex/**"
+
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  filter:
+    runs-on: ubuntu-22.04
+    permissions:
+      pull-requests: read
+    outputs:
+      plan-action: ${{ steps.filter.outputs.plan-action }}
+      lollipop-external: ${{ steps.filter.outputs.lollipop-external }}
+    # Checks to see if openapi specs in the PR match one of the ones listed.
+    # We can use the result to decide which job to run
+    # With this type of filter we can avoid creating a lot of workflow files
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dorny/[email protected]
+        id: filter
+        with:
+          filters: ./.github/opex_filters.yaml
+  plan-lollipop-external:
+    needs: filter
+    if: ${{ needs.filter.outputs.lollipop-external == 'true' || needs.filter.outputs.plan-action == 'true' }}
+    uses: ./.github/workflows/call_pr_opex_api.yml
+    name: (Lollipop - External) Plan changes against Production
+    secrets: inherit
+    with:
+      api_name: external
+      app_name: io-lollipop

apps/io-lollipop/.opex/external/env/prod/backend.ini

@@ -0,0 +1 @@
+subscription=PROD-IO

apps/io-lollipop/.opex/external/env/prod/backend.tfvars

@@ -0,0 +1,4 @@
+resource_group_name  = "terraform-state-rg"
+storage_account_name = "tfappprodio"
+container_name       = "terraform-state"
+key                  = "opex.io-lollipop.api_external.tfstate"

apps/io-lollipop/.opex/external/env/prod/config.yaml

@@ -0,0 +1,13 @@
+oa3_spec: apps/io-lollipop/api/external.yaml
+name: opex_io_lollipop_api_external
+location: Italy North
+timespan: 10m
+resource_type: api-management
+data_source: /subscriptions/ec285037-c673-4f58-b594-d7c480da4e8b/resourceGroups/io-p-rg-external/providers/Microsoft.Network/applicationGateways/io-p-appgateway
+action_groups:
+  - /subscriptions/EC285037-C673-4F58-B594-D7C480DA4E8B/resourceGroups/io-p-rg-common/providers/microsoft.insights/actionGroups/iopquarantineerror
+overrides:
+  hosts:
+    - api.io.pagopa.it
+    - api.io.italia.it
+    - api-app.internal.io.pagopa.it

apps/io-lollipop/.opex/external/env/prod/terraform.tfvars

@@ -0,0 +1,10 @@
+prefix    = "io"
+env_short = "p"
+
+tags = {
+  CreatedBy   = "Terraform"
+  Environment = "Prod"
+  Owner       = "io"
+  Source      = "https://github.com/pagopa/io-auth-n-identity-domain"
+  CostCenter  = "TS310 - PAGAMENTI & SERVIZI"
+}