fix: terratest failure fix | DEVOP-4496

honestbank · Jun 13, 2024 · 8dab23f · 8dab23f
1 parent f766c84
commit 8dab23f
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/modules/google_sql_database_instance/main.tf b/modules/google_sql_database_instance/main.tf
@@ -87,8 +87,9 @@ resource "google_sql_database_instance" "instance" {
     }
 
     ip_configuration {
+      #checkov:skip:CKV_GCP_6:Ensure 'Require SSL for connection' is enabled for Cloud SQL Database - default value is true
       #tfsec:ignore:google-sql-encrypt-in-transit-data
-      require_ssl = var.settings_ip_configuration_require_ssl
+      ssl_mode = var.settings_ip_configuration_ssl_mode
 
       #checkov:skip=CKV_GCP_60:Ensure Cloud SQL database does not have public IP - default value is false
       #tfsec:ignore:google-sql-no-public-access

diff --git a/modules/google_sql_database_instance/variables.tf b/modules/google_sql_database_instance/variables.tf
@@ -132,10 +132,10 @@ variable "settings_backup_configuration_backup_retention_settings_retained_backu
   default     = 7
 }
 
-variable "settings_ip_configuration_require_ssl" {
+variable "settings_ip_configuration_ssl_mode" {
   description = "(Optional) Whether SSL connections over IP are enforced or not."
-  type        = bool
-  default     = true
+  type        = map(any)
+  default     = null
 }
 
 variable "settings_ip_configuration_ipv4_enabled" {