-
Notifications
You must be signed in to change notification settings - Fork 0
/
alb.tf
78 lines (67 loc) · 1.92 KB
/
alb.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# create application load balancer
# terraform aws create application load balancer
resource "aws_lb" "application_load_balancer" {
name = "dev-alb"
internal = false
load_balancer_type = "application"
security_groups = [aws_security_group.alb_security_group.id]
subnet_mapping {
subnet_id = aws_subnet.public_subnet_az1.id
}
subnet_mapping {
subnet_id = aws_subnet.public_subnet_az2.id
}
enable_deletion_protection = false
tags = {
Name = "dev-alb"
}
}
# create target group
# terraform aws create target group
resource "aws_lb_target_group" "alb_target_group" {
name = "dev-tg"
target_type = "instance"
port = 80
protocol = "HTTP"
vpc_id = aws_vpc.vpc.id
health_check {
healthy_threshold = 5
interval = 30
matcher = "200,301,302"
path = "/"
port = "traffic-port"
protocol = "HTTP"
timeout = 5
unhealthy_threshold = 2
}
}
# create a listener on port 80 with redirect action
# terraform aws create listener
resource "aws_lb_listener" "alb_http_listener" {
load_balancer_arn = aws_lb.application_load_balancer.arn
port = 80
protocol = "HTTP"
default_action {
type = "redirect"
redirect {
host = "#{host}"
path = "/#{path}"
port = 443
protocol = "HTTPS"
status_code = "HTTP_301"
}
}
}
# create a listener on port 443 with forward action
# terraform aws create listener
resource "aws_lb_listener" "alb_https_listener" {
load_balancer_arn = aws_lb.application_load_balancer.arn
port = 443
protocol = "HTTPS"
ssl_policy = "ELBSecurityPolicy-2016-08"
certificate_arn = var.ssl_certificate_arn
default_action {
type = "forward"
target_group_arn = aws_lb_target_group.alb_target_group.arn
}
}