Allow External Access to dutysolicotors.org DNS Configuration

[PepperMoJ]

User Need

As a owner of the dutysolicitors.org domain I want to be able to manage the DNS configuration so that take ownership of changes without the involvement of Operations Engineering

Value

By allowing access to certain GitHub users outside of the Operations Engineering team, we can delegate the responsibility of managing the Hosted Zone elsewhere.

Functional Requirements (What):

• [ ] The appropriate team/individual members have been added to the CODEOWNERS file in the DNS repository with the correct level of access - hostedzone/dutysolicitors.org.yaml.
• [ ] A branch protection rule has been set up allowing full management of PRs for that file and users.

Non-Functional Requirements (How):

• [ ] Alternate approaches have been investigated (external collaborators repo?)

Acceptance Criteria:

• [ ] A new team/set of users have the ability to make changes to the dutysolicitors.org.yaml in the hosted zones folder. Operations Engineering should not be involved.
• [ ] The external team/set of users are aware on how to make changes correctly.

Notes:

[PepperMoJ]

I've contacted Paul Grant (the original user who raised the request for support) around who would be best suited to be added as a Codeowner for this.

[PepperMoJ]

Quick chat with @jasonBirchall - one important point to consider for the future is when we allow teams access to some of the larger hosted zones (like service.justice.gov.uk, for example), at that point we will need to change OctoDNS' configuration to split out each Hosted Zone's records into separate yaml files under a named directory.

That way we can be granular with who can do what.

[AntonyBishop]

No possible due to Security Policy around 3rd party management of MoJ owned DNS