From d59d182456a4c9f83ef81a062e02d92565cbbdda Mon Sep 17 00:00:00 2001 From: Ludovico Magnocavallo Date: Thu, 12 Dec 2024 10:37:37 +0100 Subject: [PATCH] ignore ssl certificates if none are passed in net-lb-app-int module (#2764) --- modules/net-lb-app-int/main.tf | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/modules/net-lb-app-int/main.tf b/modules/net-lb-app-int/main.tf index d056e8be7..3b63cfc41 100644 --- a/modules/net-lb-app-int/main.tf +++ b/modules/net-lb-app-int/main.tf @@ -108,12 +108,16 @@ resource "google_compute_region_target_http_proxy" "default" { } resource "google_compute_region_target_https_proxy" "default" { - count = var.protocol == "HTTPS" ? 1 : 0 - project = var.project_id - region = var.region - name = var.name - description = var.description - ssl_certificates = local.proxy_ssl_certificates + count = var.protocol == "HTTPS" ? 1 : 0 + project = var.project_id + region = var.region + name = var.name + description = var.description + ssl_certificates = ( + length(local.proxy_ssl_certificates) == 0 + ? null + : local.proxy_ssl_certificates + ) ssl_policy = var.https_proxy_config.ssl_policy url_map = google_compute_region_url_map.default.id certificate_manager_certificates = var.https_proxy_config.certificate_manager_certificates