citrix / terraform-provider-citrixadc

Part of NetScaler Automation Toolkit | https://github.com/netscaler/automation-toolkit
https://registry.terraform.io/providers/citrix/citrixadc
Apache License 2.0
118 stars 58 forks source link

[FEATURE REQUEST]: servicegroup - sslprofile support #1186

Closed adc-nerd closed 1 month ago

adc-nerd commented 3 months ago

Description

With SSL Default Profile enabled it's common to bind SSL-Backend-Profiles to service groups. There's currently no sslprofilename for servicegroup ressources (like httpprofilename, tcpprofilename....)

Affected Resource(s) and/or Data Source(s)

servicegroup

Equivalent NetScaler CLI Command

set ssl serviceGroup my-svg -sslprofile my-backend-ssl-profile

Potential Terraform Configuration

resource "citrixadc_servicegroup" "my_svg" {
...
sslprofilename = "my-backend-ssl-profile"
...
}

References

https://docs.netscaler.com/en-us/citrix-adc/current-release/ssl/ssl-profiles/ssl-enabling-the-default-profile.html

andrewhadam commented 2 months ago

Just adding a +1 here as this is a pretty important missing feature for us as well

HS1542 commented 1 month ago

I think you are looking at the wrong place in the documentation, sslprofile can be set on the servicegroup? https://registry.terraform.io/providers/citrix/citrixadc/latest/docs/resources/sslservicegroup

adc-nerd commented 1 month ago

Thank you - that's it! To set an SSL profile for a service group, you must create an additional sslservicegroup resource.

resource "citrixadc_servicegroup" "tf_svg" {
...
}

resource "citrixadc_sslservicegroup" "tf_sslsvg" {
    servicegroupname = citrixadc_servicegroup.tf_svg.servicegroupname
    sslprofile = "my-ssl-backend-profile"
}