ResiLien
/
terraform
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

provider/aws: Document lifecycle block needs for IAM Server Certificate

This commit is contained in:
clint shryock 2016-03-28 15:39:54 -05:00
parent 1b1e4620c7
commit ac063bf573
1 changed files with 23 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
website/source/docs/providers/aws/r/iam_server_certificate.html.markdown
View File

@ -17,7 +17,7 @@ Certs uploaded to IAM can easily work with other AWS services such as:
- AWS OpsWorks - AWS OpsWorks
For information about server certificates in IAM, see [Managing Server For information about server certificates in IAM, see [Managing Server
Certficates][2] in AWS Documentation. Certificates][2] in AWS Documentation.
## Example Usage ## Example Usage
@ -52,23 +52,35 @@ EOF
**Use in combination with an AWS ELB resource:** **Use in combination with an AWS ELB resource:**
Some properties of an IAM Server Certificates cannot be updated while they are
in use. In order for Terraform to effectively manage a Certificate in this situation, it is
recommended you utilize the `name_prefix` attribute and enable the
`create_before_destroy` [lifecycle block][lifecycle]. This will allow Terraform
to create a new, updated `aws_iam_server_certificate` resource and replace it in
dependant resources before attempting to destroy the old version.
``` ```
resource "aws_iam_server_certificate" "test_cert" { resource "aws_iam_server_certificate" "test_cert" {
name = "some_test_cert" name_prefix = "example-cert"
certificate_body = "${file("self-ca-cert.pem")}" certificate_body = "${file("self-ca-cert.pem")}"
private_key = "${file("test-key.pem")}" private_key = "${file("test-key.pem")}"
lifecycle {
create_before_destroy = true
}
} }
resource "aws_elb" "ourapp" { resource "aws_elb" "ourapp" {
name = "terraform-asg-deployment-example" name = "terraform-asg-deployment-example"
availability_zones = ["us-west-2a"] availability_zones = ["us-west-2a"]
cross_zone_load_balancing = true cross_zone_load_balancing = true
listener { listener {
instance_port = 8000 instance_port = 8000
instance_protocol = "http" instance_protocol = "http"
lb_port = 443 lb_port = 443
lb_protocol = "https" lb_protocol = "https"
ssl_certificate_id = "${aws_iam_server_certificate.test_cert.arn}" ssl_certificate_id = "${aws_iam_server_certificate.test_cert.arn}"
} }
} }
@ -104,3 +116,5 @@ The following arguments are supported:
[1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html
[2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingServerCerts.html [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingServerCerts.html
[lifecycle]: http://localhost:4567/docs/configuration/resources.html