kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

an empty ssl_certificates list should be set to null (#2780)

Browse Source 
An empty `ssl_certificates` list will conflict with a user-defined
`certificate_manager_certificates` value, so exclude it.
This commit is contained in:
Sergio Rodriguez
2024-12-21 05:26:29 -05:00
committed by GitHub
parent ddd8382e7c
commit 1e4a3a4bb8
3 changed files with 8 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/net-lb-app-ext-regional/main.tf
View File

@@ -80,7 +80,7 @@ resource "google_compute_region_target_https_proxy" "default" {
region = var.region
description = var.description
certificate_manager_certificates = var.https_proxy_config.certificate_manager_certificates
ssl_certificates = local.proxy_ssl_certificates
ssl_certificates = length(local.proxy_ssl_certificates) == 0 ? null : local.proxy_ssl_certificates
ssl_policy = var.https_proxy_config.ssl_policy
url_map = google_compute_region_url_map.default.id
}

2
modules/net-lb-app-ext/main.tf
View File

@@ -83,7 +83,7 @@ resource "google_compute_target_https_proxy" "default" {
certificate_map = var.https_proxy_config.certificate_map
certificate_manager_certificates = var.https_proxy_config.certificate_manager_certificates
quic_override = var.https_proxy_config.quic_override
ssl_certificates = local.proxy_ssl_certificates
ssl_certificates = length(local.proxy_ssl_certificates) == 0 ? null : local.proxy_ssl_certificates
ssl_policy = var.https_proxy_config.ssl_policy
url_map = google_compute_url_map.default.id
server_tls_policy = var.https_proxy_config.mtls_policy

16
modules/net-lb-app-int/main.tf
View File

@@ -108,16 +108,12 @@ resource "google_compute_region_target_http_proxy" "default" {
}
resource "google_compute_region_target_https_proxy" "default" {
count = var.protocol == "HTTPS" ? 1 : 0
project = var.project_id
region = var.region
name = var.name
description = var.description
ssl_certificates = (
length(local.proxy_ssl_certificates) == 0
? null
: local.proxy_ssl_certificates
)
count = var.protocol == "HTTPS" ? 1 : 0
project = var.project_id
region = var.region
name = var.name
description = var.description
ssl_certificates = length(local.proxy_ssl_certificates) == 0 ? null : local.proxy_ssl_certificates
ssl_policy = var.https_proxy_config.ssl_policy
url_map = google_compute_region_url_map.default.id
certificate_manager_certificates = var.https_proxy_config.certificate_manager_certificates