From 7d04a95c6652e0f7994f2d366766203c8edf6175 Mon Sep 17 00:00:00 2001
From: Umang Mistry <umistry@aarete.com>
Date: Thu, 30 May 2024 18:08:02 -0500
Subject: [PATCH] Updated logic to handle SSL certs

---
 streamlit-server/alb.tf       |  6 +++---
 streamlit-server/variables.tf | 11 ++++++++++-
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/streamlit-server/alb.tf b/streamlit-server/alb.tf
index a94a31c..6b9f8a3 100644
--- a/streamlit-server/alb.tf
+++ b/streamlit-server/alb.tf
@@ -128,7 +128,7 @@ resource "aws_lb_listener" "https_8501" {
   port              = "8501"
   protocol          = "HTTPS"
   ssl_policy        = "ELBSecurityPolicy-2016-08"
-  certificate_arn   = var.acm_arn_dev
+  certificate_arn   = lookup(var.acm_arns, var.environment)
 
   default_action {
     type             = "forward"
@@ -141,7 +141,7 @@ resource "aws_lb_listener" "https_8502" {
   port              = "8502"
   protocol          = "HTTPS"
   ssl_policy        = "ELBSecurityPolicy-2016-08"
-  certificate_arn   = var.acm_arn_dev
+  certificate_arn   = lookup(var.acm_arns, var.environment)
 
   default_action {
     type             = "forward"
@@ -154,7 +154,7 @@ resource "aws_lb_listener" "https_8503" {
   port              = "8503"
   protocol          = "HTTPS"
   ssl_policy        = "ELBSecurityPolicy-2016-08"
-  certificate_arn   = var.acm_arn_dev
+  certificate_arn   = lookup(var.acm_arns, var.environment)
 
   default_action {
     type             = "forward"
diff --git a/streamlit-server/variables.tf b/streamlit-server/variables.tf
index f9b2c57..268314e 100644
--- a/streamlit-server/variables.tf
+++ b/streamlit-server/variables.tf
@@ -12,7 +12,7 @@ variable "project_name" {
 # required
 variable "environment" {
   type    = string
-  default = "dev"
+  # default = "dev"
 }
 
 
@@ -59,6 +59,15 @@ variable "acm_arn_dev" {
   default = "arn:aws:acm:us-east-2:660131068782:certificate/947e04b3-be22-43bf-bea2-a0ad3b221d70"
 }
 
+variable "acm_arns" {
+  type = map(string)
+  default = {
+    dev  = "arn:aws:acm:us-east-2:660131068782:certificate/947e04b3-be22-43bf-bea2-a0ad3b221d70"
+    uat  = "arn:aws:acm:us-east-2:975049960860:certificate/e036e76d-1f4f-496e-ac97-5f65ec4a34cc"
+    prod = "arn:aws:acm:region:account-id:certificate/prod-cert-id"
+  }
+}
+
 variable "secret_key" {
   type    = string
 }