Skip to content

Commit 70c1576

Browse files
author
rohit-ng
committed
chore: add ACM certificate configuration for Kong public domain
1 parent 0faa4d7 commit 70c1576

File tree

1 file changed

+18
-5
lines changed

1 file changed

+18
-5
lines changed

main.tf

Lines changed: 18 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -202,7 +202,7 @@ data "aws_ecs_cluster" "default" {
202202

203203
module "ecs_kong" {
204204
source = "infraspecdev/ecs-deployment/aws"
205-
version = "~> 2.0.0"
205+
version = "~> 4.0.4"
206206

207207
vpc_id = var.vpc_id
208208
cluster_name = data.aws_ecs_cluster.default.cluster_name
@@ -257,6 +257,7 @@ module "ecs_kong" {
257257
logConfiguration = var.log_configuration_for_kong
258258
}
259259
]
260+
volume = []
260261
}
261262

262263
create_capacity_provider = false
@@ -289,10 +290,10 @@ module "ecs_kong" {
289290

290291
listeners = {
291292
kong_https = {
292-
port = 443
293-
protocol = "HTTPS"
294-
certificate_arn = module.kong_public_dns_record.certificate_arn
295-
ssl_policy = var.ssl_policy
293+
port = 443
294+
protocol = "HTTPS"
295+
certificate = local.kong.public_acm_certificate
296+
ssl_policy = var.ssl_policy
296297

297298
default_action = [
298299
{
@@ -310,6 +311,18 @@ module "ecs_kong" {
310311
}
311312
}
312313

314+
create_acm = true
315+
acm_certificates = {
316+
(local.kong.public_acm_certificate) = {
317+
domain_name = var.kong_public_domain_name
318+
validation_option = {
319+
domain_name = var.kong_public_domain_name
320+
validation_domain = var.kong_public_domain_name
321+
}
322+
record_zone_id = module.kong_public_dns_record.zone_id
323+
}
324+
}
325+
313326
depends_on = [module.kong_rds]
314327
}
315328

0 commit comments

Comments
 (0)