cisagov / cool-sharedservices-freeipa

Terraform code to create the FreeIPA shared service in the COOL environment.
Creative Commons Zero v1.0 Universal
4 stars 0 forks source link

Reduce default TTL from 3600 to 60 #38

Closed jsf9k closed 3 years ago

jsf9k commented 3 years ago

๐Ÿ—ฃ Description

This pull request reduces the default TTL for FreeIPA-related DNS records from 3600 to 60.

๐Ÿ’ญ Motivation and context

It makes sense to reduce the default TTL to 60, since I intend to eventually add code to automatically update FreeIPA DNS records depending on the status of health checks. I am making this change now so that there is one less step I have to do when I upgrade the FreeIPA cluster, and also so I don't have to wait an hour (for the previous default TTL of 3600 to time out) before making changes.

AWS itself sets a TTL of 60 for most of their records to allow them to be updated at will without causing anything more than a very temporary glitch.

๐Ÿงช Testing

These changes have been successfully deployed to our staging COOL environment.

โœ… Pre-approval checklist

โœ… Pre-merge checklist