You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| certificate | Content of the SSL certificate. Required if `ssl`is `true` and `ssl_certificates` is empty.|`string`|`null`| no |
125
-
| certificate\_map | Certificate Map ID in format projects/{project}/locations/global/certificateMaps/{name}. Identifies a certificate map associated with the given target proxy |`string`|`null`| no |
124
+
| certificate | Content of the SSL certificate. Requires `ssl`to be set to `true` and `create_ssl_certificate` set to `true`|`string`|`null`| no |
125
+
| certificate\_map | Certificate Map ID in format projects/{project}/locations/global/certificateMaps/{name}. Identifies a certificate map associated with the given target proxy. Requires `ssl` to be set to `true`|`string`|`null`| no |
126
126
| create\_address | Create a new global IPv4 address |`bool`|`true`| no |
127
127
| create\_ipv6\_address | Allocate a new IPv6 address. Conflicts with "ipv6\_address" - if both specified, "create\_ipv6\_address" takes precedence. |`bool`|`false`| no |
128
+
| create\_ssl\_certificate | If `true`, Create certificate using `private_key/certificate`|`bool`|`false`| no |
128
129
| create\_url\_map | Set to `false` if url\_map variable is provided. |`bool`|`true`| no |
129
130
| edge\_security\_policy | The resource URL for the edge security policy to associate with the backend service |`string`|`null`| no |
130
131
| enable\_ipv6 | Enable IPv6 address on the CDN load-balancer |`bool`|`false`| no |
@@ -135,21 +136,20 @@ module "gce-lb-http" {
135
136
| ipv6\_address | An existing IPv6 address to use (the actual IP address value) |`string`|`null`| no |
136
137
| labels | The labels to attach to resources created by this module |`map(string)`|`{}`| no |
137
138
| load\_balancing\_scheme | Load balancing scheme type (EXTERNAL for classic external load balancer, EXTERNAL\_MANAGED for Envoy-based load balancer, and INTERNAL\_SELF\_MANAGED for traffic director) |`string`|`"EXTERNAL"`| no |
138
-
| managed\_ssl\_certificate\_domains | Create Google-managed SSL certificates for specified domains. Requires `ssl` to be set to `true`and `use_ssl_certificates` set to `false`. |`list(string)`|`[]`| no |
139
+
| managed\_ssl\_certificate\_domains | Create Google-managed SSL certificates for specified domains. Requires `ssl` to be set to `true`|`list(string)`|`[]`| no |
139
140
| name | Name for the forwarding rule and prefix for supporting resources |`string`| n/a | yes |
140
141
| network | Network for INTERNAL\_SELF\_MANAGED load balancing scheme |`string`|`"default"`| no |
141
-
| private\_key | Content of the private SSL key. Required if `ssl`is `true` and `ssl_certificates` is empty.|`string`|`null`| no |
142
+
| private\_key | Content of the private SSL key. Requires `ssl`to be set to `true` and `create_ssl_certificate` set to `true`|`string`|`null`| no |
142
143
| project | The project to deploy to, if not set the default provider project is used. |`string`| n/a | yes |
143
144
| quic | Specifies the QUIC override policy for this resource. Set true to enable HTTP/3 and Google QUIC support, false to disable both. Defaults to null which enables support for HTTP/3 only. |`bool`|`null`| no |
144
145
| random\_certificate\_suffix | Bool to enable/disable random certificate name generation. Set and keep this to true if you need to change the SSL cert. |`bool`|`false`| no |
145
146
| security\_policy | The resource URL for the security policy to associate with the backend service |`string`|`null`| no |
146
-
| ssl | Set to `true` to enable SSL support, requires variable `ssl_certificates`- a list of self\_link certs|`bool`|`false`| no |
147
-
| ssl\_certificates | SSL cert self\_link list. Required if `ssl`is `true` and no `private_key` and `certificate` is provided.|`list(string)`|`[]`| no |
147
+
| ssl | Set to `true` to enable SSL support. If `true` then at least one of these are required: 1) `ssl_certificates`OR 2) `create_ssl_certificate` set to `true` and `private_key/certificate` OR 3) `managed_ssl_certificate_domains`, OR 4) `certificate_map`|`bool`|`false`| no |
148
+
| ssl\_certificates | SSL cert self\_link list. Requires `ssl`to be set to `true`|`list(string)`|`[]`| no |
148
149
| ssl\_policy | Selfink to SSL Policy |`string`|`null`| no |
149
150
| target\_service\_accounts | List of target service accounts for health check firewall rule. Exactly one of target\_tags or target\_service\_accounts should be specified. |`list(string)`|`[]`| no |
150
151
| target\_tags | List of target tags for health check firewall rule. Exactly one of target\_tags or target\_service\_accounts should be specified. |`list(string)`|`[]`| no |
151
152
| url\_map | The url\_map resource to use. Default is to send all traffic to first backend. |`string`|`null`| no |
152
-
| use\_ssl\_certificates | If true, use the certificates provided by `ssl_certificates`, otherwise, create cert from `private_key` and `certificate`|`bool`|`false`| no |
153
153
154
154
## Outputs
155
155
@@ -161,6 +161,7 @@ module "gce-lb-http" {
161
161
| http\_proxy | The HTTP proxy used by this module. |
162
162
| https\_proxy | The HTTPS proxy used by this module. |
163
163
| ipv6\_enabled | Whether IPv6 configuration is enabled on this load-balancer |
164
+
| ssl\_certificate\_created | The SSL certificate create from key/pem |
164
165
| url\_map | The default URL map used by this module. |
Copy file name to clipboardExpand all lines: autogen/variables.tf.tmpl
+26-26Lines changed: 26 additions & 26 deletions
Original file line number
Diff line number
Diff line change
@@ -215,51 +215,57 @@ variable "http_forward" {
215
215
}
216
216
217
217
variable "ssl" {
218
-
description = "Set to `true` to enable SSL support, requires variable `ssl_certificates` - a list of self_link certs"
218
+
description = "Set to `true` to enable SSL support. If `true` then at least one of these are required: 1) `ssl_certificates` OR 2) `create_ssl_certificate` set to `true` and `private_key/certificate` OR 3) `managed_ssl_certificate_domains`, OR 4) `certificate_map`"
219
219
type = bool
220
220
default = false
221
221
}
222
222
223
-
variable "ssl_policy" {
224
-
type = string
225
-
description = "Selfink to SSL Policy"
226
-
default = null
223
+
variable "create_ssl_certificate" {
224
+
description = "If `true`, Create certificate using `private_key/certificate`"
225
+
type = bool
226
+
default = false
227
227
}
228
228
229
-
variable "quic" {
230
-
type = bool
231
-
description = "Specifies the QUIC override policy for this resource. Set true to enable HTTP/3 and Google QUIC support, false to disable both. Defaults to null which enables support for HTTP/3 only."
232
-
default = null
229
+
variable "ssl_certificates" {
230
+
description = "SSL cert self_link list. Requires `ssl` to be set to `true`"
231
+
type = list(string)
232
+
default = []
233
233
}
234
234
235
235
variable "private_key" {
236
-
description = "Content of the private SSL key. Required if `ssl` is `true` and `ssl_certificates` is empty."
236
+
description = "Content of the private SSL key. Requires `ssl` to be set to `true` and `create_ssl_certificate` set to `true`"
237
237
type = string
238
238
default = null
239
239
}
240
240
241
241
variable "certificate" {
242
-
description = "Content of the SSL certificate. Required if `ssl` is `true` and `ssl_certificates` is empty."
242
+
description = "Content of the SSL certificate. Requires `ssl` to be set to `true` and `create_ssl_certificate` set to `true`"
243
243
type = string
244
244
default = null
245
245
}
246
246
247
247
variable "managed_ssl_certificate_domains" {
248
-
description = "Create Google-managed SSL certificates for specified domains. Requires `ssl` to be set to `true` and `use_ssl_certificates` set to `false`."
248
+
description = "Create Google-managed SSL certificates for specified domains. Requires `ssl` to be set to `true`"
249
249
type = list(string)
250
250
default = []
251
251
}
252
252
253
-
variable "use_ssl_certificates" {
254
-
description = "If true, use the certificates provided by `ssl_certificates`, otherwise, create cert from `private_key` and `certificate`"
255
-
type = bool
256
-
default = false
253
+
variable "certificate_map" {
254
+
description = "Certificate Map ID in format projects/{project}/locations/global/certificateMaps/{name}. Identifies a certificate map associated with the given target proxy. Requires `ssl` to be set to `true`"
255
+
type = string
256
+
default = null
257
257
}
258
258
259
-
variable "ssl_certificates" {
260
-
description = "SSL cert self_link list. Required if `ssl` is `true` and no `private_key` and `certificate` is provided."
261
-
type = list(string)
262
-
default = []
259
+
variable "ssl_policy" {
260
+
type = string
261
+
description = "Selfink to SSL Policy"
262
+
default = null
263
+
}
264
+
265
+
variable "quic" {
266
+
type = bool
267
+
description = "Specifies the QUIC override policy for this resource. Set true to enable HTTP/3 and Google QUIC support, false to disable both. Defaults to null which enables support for HTTP/3 only."
description = "Certificate Map ID in format projects/{project}/locations/global/certificateMaps/{name}. Identifies a certificate map associated with the given target proxy"
303
-
type = string
304
-
default = null
305
-
}
306
-
307
307
variable "network" {
308
308
description = "Network for INTERNAL_SELF_MANAGED load balancing scheme"
0 commit comments