Merge pull request #23 from kiraum/kiraum/dnssec

chore(dnssec): adding dnssec output to request dnssec for xpto.io
kiraum · Dec 9, 2024 · ab5ded5 · ab5ded5
2 parents 224f1d3 + b6772cf
commit ab5ded5
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/environments/prod/outputs.tf b/environments/prod/outputs.tf
@@ -0,0 +1,4 @@
+output "route53_dnssec_keys" {
+  value       = module.route53.dnssec_key_signing_keys
+  description = "DNSSEC key signing key details for Route53 zones"
+}
diff --git a/modules/route53/output.tf b/modules/route53/output.tf
@@ -1,3 +1,18 @@
 output "ds_records" {
   value = { for k, v in aws_route53_key_signing_key.key_signing_key : k => v.ds_record }
 }
+
+output "dnssec_key_signing_keys" {
+  value = {
+    for k, v in aws_route53_key_signing_key.key_signing_key : k => {
+      key_tag                    = v.key_tag
+      digest_algorithm_mnemonic  = v.digest_algorithm_mnemonic
+      digest_algorithm_type      = v.digest_algorithm_type
+      digest_value               = v.digest_value
+      public_key                 = v.public_key
+      signing_algorithm_mnemonic = v.signing_algorithm_mnemonic
+      signing_algorithm_type     = v.signing_algorithm_type
+    }
+  }
+  description = "DNSSEC key signing key details for each domain"
+}