You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| address | IPv4 address (actual IP address value) | string |`"null"`| no |
99
-
| ipv6_address | IPv6 address (actual IP address value) | string |`"null"`| no |
100
-
| backends | Map backend indices to list of backend maps. | object | n/a | yes |
101
-
| cdn | Set to `true` to enable cdn on backend. | bool |`"false"`| no |
102
-
| certificate | Content of the SSL certificate. Required if `ssl` is `true` and `ssl_certificates` is empty. | string |`"null"`| no |
103
-
| certificate\_map | Certificate Map ID in format projects/{project}/locations/global/certificateMaps/. Identifies a certificate map associated with the given target proxy |`string`|`null`| no |
104
-
| create_address | Create a new global IPv4 address | bool |`"true"`| no |
105
-
| create_ipv6_address | Create a new global IPv6 address | bool |`"true"`| no |
106
-
| create_url_map | Set to `false` if url_map variable is provided. | bool |`"true"`| no |
107
-
| firewall_networks | Names of the networks to create firewall rules in | list(string) |`<list>`| no |
108
-
| firewall_projects | Names of the projects to create firewall rules in | list(string) |`<list>`| no |
109
-
| http_forward | Set to `false` to disable HTTP port 80 forward | bool |`"true"`| no |
110
-
| https_redirect | Set to `true` to enable https redirect on the lb. | bool |`"false"`| no |
111
-
| name | Name for the forwarding rule and prefix for supporting resources | string | n/a | yes |
112
-
| private_key | Content of the private SSL key. Required if `ssl` is `true` and `ssl_certificates` is empty. | string |`"null"`| no |
113
-
| project | The project to deploy to, if not set the default provider project is used. | string | n/a | yes |
114
-
| quic | Set to `true` to enable QUIC support | bool |`"false"`| no |
115
-
| security_policy | The resource URL for the security policy to associate with the backend service | string |`"null"`| no |
116
-
| ssl | Set to `true` to enable SSL support, requires variable `ssl_certificates` - a list of self_link certs | bool |`"false"`| no |
117
-
| ssl_certificates | SSL cert self_link list. Required if `ssl` is `true` and no `private_key` and `certificate` is provided. | list(string) |`<list>`| no |
118
-
| ssl_policy | Selfink to SSL Policy | string |`"null"`| no |
119
-
| target_service_accounts | List of target service accounts for health check firewall rule. Exactly one of target_tags or target_service_accounts should be specified. | list(string) |`<list>`| no |
120
-
| target_tags | List of target tags for health check firewall rule. Exactly one of target_tags or target_service_accounts should be specified. | list(string) |`<list>`| no |
121
-
| url_map | The url_map resource to use. Default is to send all traffic to first backend. | string |`"null"`| no |
122
-
| use_ssl_certificates | If true, use the certificates provided by `ssl_certificates`, otherwise, create cert from `private_key` and `certificate`| bool |`"false"`| no |
95
+
| Name | Description | Type | Default | Required |
| certificate | Content of the SSL certificate. Requires `ssl` to be set to `true` and `create_ssl_certificate` set to `true`|`string`|`null`| no |
100
+
| certificate\_map | Certificate Map ID in format projects/{project}/locations/global/certificateMaps/{name}. Identifies a certificate map associated with the given target proxy. Requires `ssl` to be set to `true`|`string`|`null`| no |
101
+
| create\_address | Create a new global IPv4 address |`bool`|`true`| no |
102
+
| create\_ipv6\_address | Allocate a new IPv6 address. Conflicts with "ipv6\_address" - if both specified, "create\_ipv6\_address" takes precedence. |`bool`|`false`| no |
103
+
| create\_ssl\_certificate | If `true`, Create certificate using `private_key/certificate`|`bool`|`false`| no |
104
+
| create\_url\_map | Set to `false` if url\_map variable is provided. |`bool`|`true`| no |
105
+
| edge\_security\_policy | The resource URL for the edge security policy to associate with the backend service |`string`|`null`| no |
106
+
| enable\_ipv6 | Enable IPv6 address on the CDN load-balancer |`bool`|`false`| no |
107
+
| firewall\_networks | Names of the networks to create firewall rules in |`list(string)`| <pre>[<br> "default"<br>]</pre> | no |
108
+
| firewall\_projects | Names of the projects to create firewall rules in |`list(string)`| <pre>[<br> "default"<br>]</pre> | no |
109
+
| http\_forward | Set to `false` to disable HTTP port 80 forward |`bool`|`true`| no |
110
+
| http\_keep\_alive\_timeout\_sec | Specifies how long to keep a connection open, after completing a response, while there is no matching traffic (in seconds). |`number`|`null`| no |
111
+
| http\_port | The port for the HTTP load balancer |`number`|`80`| no |
112
+
| https\_port | The port for the HTTPS load balancer |`number`|`443`| no |
113
+
| https\_redirect | Set to `true` to enable https redirect on the lb. |`bool`|`false`| no |
114
+
| ipv6\_address | An existing IPv6 address to use (the actual IP address value) |`string`|`null`| no |
115
+
| labels | The labels to attach to resources created by this module |`map(string)`|`{}`| no |
116
+
| load\_balancing\_scheme | Load balancing scheme type (EXTERNAL for classic external load balancer, EXTERNAL\_MANAGED for Envoy-based load balancer, and INTERNAL\_SELF\_MANAGED for traffic director) |`string`|`"EXTERNAL"`| no |
117
+
| managed\_ssl\_certificate\_domains | Create Google-managed SSL certificates for specified domains. Requires `ssl` to be set to `true`|`list(string)`|`[]`| no |
118
+
| name | Name for the forwarding rule and prefix for supporting resources |`string`| n/a | yes |
| network | Network for INTERNAL\_SELF\_MANAGED load balancing scheme |`string`|`"default"`| no |
122
+
| private\_key | Content of the private SSL key. Requires `ssl` to be set to `true` and `create_ssl_certificate` set to `true`|`string`|`null`| no |
123
+
| project | The project to deploy to, if not set the default provider project is used. |`string`| n/a | yes |
124
+
| quic | Specifies the QUIC override policy for this resource. Set true to enable HTTP/3 and Google QUIC support, false to disable both. Defaults to null which enables support for HTTP/3 only. |`bool`|`null`| no |
125
+
| random\_certificate\_suffix | Bool to enable/disable random certificate name generation. Set and keep this to true if you need to change the SSL cert. |`bool`|`false`| no |
126
+
| security\_policy | The resource URL for the security policy to associate with the backend service |`string`|`null`| no |
127
+
| server\_tls\_policy | The resource URL for the server TLS policy to associate with the https proxy service |`string`|`null`| no |
128
+
| ssl | Set to `true` to enable SSL support. If `true` then at least one of these are required: 1) `ssl_certificates` OR 2) `create_ssl_certificate` set to `true` and `private_key/certificate` OR 3) `managed_ssl_certificate_domains`, OR 4) `certificate_map`|`bool`|`false`| no |
129
+
| ssl\_certificates | SSL cert self\_link list. Requires `ssl` to be set to `true`|`list(string)`|`[]`| no |
130
+
| ssl\_policy | Selfink to SSL Policy |`string`|`null`| no |
131
+
| target\_service\_accounts | List of target service accounts for health check firewall rule. Exactly one of target\_tags or target\_service\_accounts should be specified. |`list(string)`|`[]`| no |
132
+
| target\_tags | List of target tags for health check firewall rule. Exactly one of target\_tags or target\_service\_accounts should be specified. |`list(string)`|`[]`| no |
133
+
| url\_map | The url\_map resource to use. Default is to send all traffic to first backend. |`string`|`null`| no |
0 commit comments