Optionally do not create TLS cert secret

astronomer · Jun 24, 2020 · 8a85e81 · 8a85e81
1 parent 8633680
commit 8a85e81
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/secrets.tf b/secrets.tf
@@ -15,6 +15,7 @@ resource "kubernetes_secret" "astronomer_bootstrap" {
 }
 
 resource "kubernetes_secret" "astronomer_tls" {
+  count = var.tls_cert != "" && var.tls_key != "" ? 1 : 0
   depends_on = [null_resource.dependency_getter]
 
   metadata {

diff --git a/variables.tf b/variables.tf
@@ -4,11 +4,13 @@ variable "db_connection_string" {
 }
 
 variable "tls_cert" {
+  default = ""
   type        = string
   description = "The signed certificate for the Astronomer Load Balancer. It should be signed by a certificate authorize and should have common name *.base_domain"
 }
 
 variable "tls_key" {
+  default = ""
   type        = string
   description = "The private key corresponding to the signed certificate tls_cert."
 }