Repository navigation
Expand file tree
/
Copy pathbwdserver.tf
More file actions
65 lines (55 loc) · 2.2 KB
/
Copy pathbwdserver.tf
File metadata and controls
65 lines (55 loc) · 2.2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
resource "google_compute_global_address" "bwdserver_ip_address" {
name = "bwdserver"
address = "34.117.116.96"
address_type = "EXTERNAL"
ip_version = "IPV4"
}
########################
# Certificate Map
########################
resource "google_certificate_manager_certificate_map" "bwdserver" {
name = "bwdserver-map"
description = ""
}
########################
# Load balancer
# This was tough to figure out. I followed the docs below, but used a certificate map
# instead of the --ssl-certificates flag, then imported them to terraform.
# https://cloud.google.com/load-balancing/docs/https/setup-global-ext-https-serverless#creating_the_load_balancer
########################
resource "google_compute_region_network_endpoint_group" "bwdserver" {
name = "bwdserver-neg"
network_endpoint_type = "SERVERLESS"
region = google_cloud_run_v2_service.bwdserver.location
cloud_run {
service = google_cloud_run_v2_service.bwdserver.name
}
}
resource "google_compute_backend_service" "bwdserver" {
name = "bwdserver-backend"
load_balancing_scheme = "EXTERNAL_MANAGED"
protocol = "HTTP"
port_name = "http"
timeout_sec = 30
connection_draining_timeout_sec = 0
backend {
group = google_compute_region_network_endpoint_group.bwdserver.id
}
}
resource "google_compute_url_map" "bwdserver_url_map" {
name = "bwdserver-url-map"
default_service = google_compute_backend_service.bwdserver.id
}
resource "google_compute_target_https_proxy" "bwdserver_target_proxy" {
name = "bwdserver-target-proxy"
url_map = google_compute_url_map.bwdserver_url_map.id
// self_link isn't a member here
certificate_map = "https://certificatemanager.googleapis.com/v1/${google_certificate_manager_certificate_map.bwdserver.id}"
}
resource "google_compute_global_forwarding_rule" "bwdserver" {
name = "forward-bwdserver-all"
load_balancing_scheme = "EXTERNAL_MANAGED"
target = google_compute_target_https_proxy.bwdserver_target_proxy.self_link
port_range = "443"
ip_address = google_compute_global_address.bwdserver_ip_address.address
}