daml/infra/modules/gcp_cdn_bucket
Gary Verhaegen feb53f96c1
infra: tighten TLS security (#14239)
This tightens our TLS configuration a bit, mostly by dropping support
for SSL3, TLS1.0 and TLS1.1 on https://hoogle.daml.com,
https://bazel-cache.da-ext.net, https://nix-cache.da-ext.net and the
daml-binaries front (which I don't think we still use).

CHANGELOG_BEGIN
CHANGELOG_END
2022-06-21 14:37:24 +00:00
..
google_compute.tf infra: tighten TLS security (#14239) 2022-06-21 14:37:24 +00:00
google_storage.tf update copyright headers (#12240) 2022-01-03 16:36:51 +00:00
outputs.tf update copyright headers (#12240) 2022-01-03 16:36:51 +00:00
README.md target s3 bucket with docs refresh script (#1287) 2019-05-21 22:26:07 +00:00
variables.tf infra: tighten TLS security (#14239) 2022-06-21 14:37:24 +00:00
versions.tf Bump terraform (#12670) 2022-01-31 15:46:59 +01:00

A Google Storage Bucket + CDN configuration

This modules contains essentially two things:

  • A GCS bucket to store objects into
  • A load-balancer connected to it

It also makes a few assumptions:

  • A service account will be created to write into the bucket
  • All objects are meant to be publicly-readable

Module config

> terraform-docs md .

Inputs

Name Description Type Default Required
cache_retention_days The number of days to keep the objects around string n/a yes
labels Labels to apply on all the resources map <map> no
name Name prefix for all the resources string n/a yes
project GCP project name string n/a yes
region GCP region in which to create the resources string n/a yes
ssl_certificate A reference to the SSL certificate, google managed or not string n/a yes

Outputs

Name Description
bucket_name Name of the GCS bucket that will receive the objects.
external_ip The external IP assigned to the global fowarding rule.