add ssl_mode given deprecation of require_ssl (#1152)

Signed-off-by: Bob Callaway <[email protected]>
sigstore · Jun 25, 2024 · 0f6854b · 0f6854b
1 parent 0c046ff
commit 0f6854b
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/terraform/gcp/modules/mysql-shard/mysql.tf b/terraform/gcp/modules/mysql-shard/mysql.tf
@@ -40,6 +40,7 @@ resource "google_sql_database_instance" "trillian" {
       ipv4_enabled    = var.ipv4_enabled
       private_network = var.network
       require_ssl     = var.require_ssl
+      ssl_mode        = var.require_ssl ? "TRUSTED_CLIENT_CERTIFICATE_REQUIRED" : "SSL_MODE_UNSPECIFIED"
     }
 
     database_flags {
@@ -80,6 +81,7 @@ resource "google_sql_database_instance" "read_replica" {
       ipv4_enabled    = var.ipv4_enabled
       private_network = var.network
       require_ssl     = var.require_ssl
+      ssl_mode        = var.require_ssl ? "TRUSTED_CLIENT_CERTIFICATE_REQUIRED" : "SSL_MODE_UNSPECIFIED"
     }
 
     database_flags {

diff --git a/terraform/gcp/modules/mysql/mysql.tf b/terraform/gcp/modules/mysql/mysql.tf
@@ -126,6 +126,7 @@ resource "google_sql_database_instance" "sigstore" {
       ipv4_enabled    = var.ipv4_enabled
       private_network = var.network
       require_ssl     = var.require_ssl
+      ssl_mode        = var.require_ssl ? "TRUSTED_CLIENT_CERTIFICATE_REQUIRED" : "SSL_MODE_UNSPECIFIED"
     }
 
     database_flags {
@@ -173,6 +174,7 @@ resource "google_sql_database_instance" "read_replica" {
       ipv4_enabled    = var.ipv4_enabled
       private_network = var.network
       require_ssl     = var.require_ssl
+      ssl_mode        = var.require_ssl ? "TRUSTED_CLIENT_CERTIFICATE_REQUIRED" : "SSL_MODE_UNSPECIFIED"
     }
 
     database_flags {