Dynamic mTLS with tls provider + Load Balancer + ACLs Enabled - Githubissues

picatz / terraform-google-nomad

📗 Terraform Module for Nomad clusters with Consul on GCP

https://registry.terraform.io/modules/picatz/nomad/google

MIT License

79 stars 16 forks source link

Dynamic mTLS with tls provider + Load Balancer + ACLs Enabled #3

Closed picatz closed 4 years ago

picatz commented 4 years ago

This PR aims to fix #2 along with some extra fun.

Probably could'a get it in scope a bit better... but, I'm going to roll with it. 🚀

Dynamically generates mTLS certificates with Terraform, removing old Packer artifacts
Create load balancer to make servers (protected with mTLS + then ACLs after bootstrapping) available without needing to do the SSH bastion tunneling
Cleaned up ssh-mtls-terminating-proxy script, so it now uses Terraform output by default
Other formatting cleanup with terraform fmt
Work in progress ACL bootstrapping with Terraform config