Module to provision or lookup an instance of Certificate Manager on IBM Cloud. Optionally, the Certificate Manager instance can be encrypted with a root key from a KMS instance.

Note: This module follows the Terraform conventions regarding how provider configuration is defined within the Terraform template and passed into the module - https://www.terraform.io/docs/language/modules/develop/providers.html. The default provider configuration flows through to the module. If different configuration is required for a module, it can be explicitly passed in the providers block of the module - https://www.terraform.io/docs/language/modules/develop/providers.html#passing-providers-explicitly.

The module depends on the following software components:

• terraform - v13

• IBM Cloud provider >= 1.22.0

This module makes use of the output from other modules:

• Resource Group - github.com/cloud-native-toolkit/terraform-ibm-resource-group
• KMS Key - github.com/cloud-native-toolkit/terraform-ibm-kms-key

terraform {
  required_providers {
    ibm = {
      source = "ibm-cloud/ibm"
    }
  }
  required_version = ">= 0.13"
}

provider "ibm" {
  ibmcloud_api_key = var.ibmcloud_api_key
  region = var.region
}

module "cert-manager" {
  source = "github.com/cloud-native-toolkit/terraform-ibm-cert-manager"

  resource_group_name = module.resource_group.name
  region = var.region
  provision = var.cert-manager_provision
  private_endpoint = var.cert-manager_private_endpoint
  kms_private_endpoint = var.cert-manager_kms_private_endpoint
  kms_enabled = var.cert-manager_kms_enabled
  kms_id      = module.kms_key.kms_id
  kms_key_crn = module.kms_key.crn
  kms_private_url = module.kms_key.kms_private_url
  kms_public_url  = module.kms_key.kms_public_url
}