SSL_policy in front end configuration using terraform

Google Cloud Compute Infrastructure
1

Hello all

i’m using

github.com/GoogleCloudPlatform/cloud-foundation-fabric.git//modules/net-address?ref=v27.0.0 module to create an ILB in front of APIGEEX. By default module attach a GCP_default SSL policy to front end but this is a vulnerability issue as it permit TLS 1.1. I would create a SSL policy with TLS 1.2 minumum and relate it to frontend configuration with terraform
I’m not able to fin a way to do it

1 Like
2

solved: in last module

github.com/GoogleCloudPlatform/cloud-foundation-fabric//modules/net-lb-app-int
it is possible to set

#--------------------------------------------------------------

DEFINIZIONE SSL _POLICY

#--------------------------------------------------------------
resource “google_compute_region_ssl_policy” “apigee-priv-ilb-policy” {
name = “apigee-priv-ilb-policy”
project = var.project_id
region = var.region
profile = “MODERN”
min_tls_version = “TLS_1_2”
}

and then in ILB definiton

https_proxy_config = {
ssl_policy = google_compute_region_ssl_policy.apigee-north-priv-ilb-policy.id
}

1 Like