allow ssl redirect to be disabled

StayWell · Jun 26, 2020 · f258cc9 · f258cc9
1 parent 97a9191
commit f258cc9
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/main.tf b/main.tf
@@ -177,7 +177,8 @@ resource "kubernetes_ingress" "this" {
 
     annotations = {
       "kubernetes.io/ingress.class"                    = "nginx"
-      "nginx.ingress.kubernetes.io/force-ssl-redirect" = true
+      "nginx.ingress.kubernetes.io/ssl-redirect"       = var.ssl
+      "nginx.ingress.kubernetes.io/force-ssl-redirect" = var.ssl
     }
   }
 

diff --git a/variables.tf b/variables.tf
@@ -49,6 +49,11 @@ variable "node_port" {
 }
 
 variable "jnlp_port" {
-  description = "JNLP port exposed for Jenkins agents"
+  description = "https://www.jenkins.io/doc/book/managing/security/#tcp-port"
   default     = "50000"
 }
+
+variable "ssl" {
+  description = "https://kubernetes.github.io/ingress-nginx/user-guide/tls/#server-side-https-enforcement-through-redirect"
+  default     = true
+}