add variable to toggle standalone mysql SSL setting (#1253)

Signed-off-by: Bob Callaway <bcallaway@google.com>
sigstore · Sep 5, 2024 · 3a1b16e · 3a1b16e
1 parent c4afdd7
commit 3a1b16e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/terraform/gcp/modules/sigstore/sigstore.tf b/terraform/gcp/modules/sigstore/sigstore.tf
@@ -417,7 +417,7 @@ module "standalone_mysqls" {
   db_name = var.mysql_db_name
 
   ipv4_enabled              = var.mysql_ipv4_enabled
-  require_ssl               = var.mysql_require_ssl
+  require_ssl               = var.standalone_mysql_ssl
   backup_enabled            = var.mysql_backup_enabled
   binary_log_backup_enabled = var.mysql_binary_log_backup_enabled
   collation                 = var.mysql_collation

diff --git a/terraform/gcp/modules/sigstore/variables.tf b/terraform/gcp/modules/sigstore/variables.tf
@@ -357,6 +357,12 @@ variable "standalone_mysql_tier" {
   default     = "db-n1-standard-4"
 }
 
+variable "standalone_mysql_ssl" {
+  type        = bool
+  description = "force connections to the database to use SSL"
+  default     = true
+}
+
 //  Cluster node pool
 variable "initial_node_count" {
   type    = number