alb.tf

main.tf

resource "aws_lb" "main" {
  name               = "${var.name}-alb-${var.environment}"
  internal           = false
  load_balancer_type = "application"
  security_groups    = var.alb_security_groups
  subnets            = var.subnets.*.id

  enable_deletion_protection = false

  tags = {
    Name        = "${var.name}-alb-${var.environment}"
    Environment = var.environment
  }
}
locals {
  target_groups = [
    "green",
    "blue",
  ]
}
resource "aws_alb_target_group" "main" {
  count = length(local.target_groups)

  name        = "${var.name}-tg-${var.environment}-${element(local.target_groups, count.index)}"
  port        = 80
  protocol    = "HTTP"
  vpc_id      = var.vpc_id
  target_type = "ip"

  health_check {
    healthy_threshold   = "3"
    interval            = "60"
    protocol            = "HTTP"
    matcher             = "200-399"
    timeout             = "30"
    path                = var.health_check_path
    unhealthy_threshold = "2"
  }

  tags = {
    Name        = "${var.name}-tg-${var.environment}-${element(local.target_groups, count.index)}"
    Environment = var.environment
  }
}


# Redirect to https listener
resource "aws_alb_listener" "http" {
  load_balancer_arn = aws_lb.main.id
  port              = 80
  protocol          = "HTTP"

  default_action {
     target_group_arn = aws_alb_target_group.main[0].arn
     type             = "forward"
  }
 
}

resource "aws_alb_listener" "http2" {
  load_balancer_arn = aws_lb.main.id
  port              = 8080
  protocol          = "HTTP"

  default_action {
     target_group_arn = aws_alb_target_group.main[0].arn
     type             = "forward"
  }
 
}

/*
# Redirect ssl traffic to target group
resource "aws_alb_listener" "https" {
    load_balancer_arn = aws_lb.main.id
    port              = 443
    protocol          = "HTTPS"

    ssl_policy        = "ELBSecurityPolicy-2016-08"
    certificate_arn   = var.alb_tls_cert_arn

    default_action {
        target_group_arn = aws_alb_target_group.main.id
        type             = "forward"
    }
}
*/

output "aws_alb_target_group" {
  value = aws_alb_target_group.main
}
output "aws_alb_listener" {
  value = aws_alb_listener.http
}
output "aws_alb_listener2" {
  value = aws_alb_listener.http2
}

var.tf

variable "name" {
  description = "the name of your stack, e.g. \"demo\""
}

variable "environment" {
  description = "the name of your environment, e.g. \"prod\""
}

variable "subnets" {
  description = "Comma separated list of subnet IDs"
}

variable "vpc_id" {
  description = "VPC ID"
}

variable "alb_security_groups" {
  description = "Comma separated list of security groups"
}
/*
variable "alb_tls_cert_arn" {
  description = "The ARN of the certificate that the ALB uses for https"
}
*/
variable "health_check_path" {
  description = "Path to check if the service is healthy, e.g. \"/status\""
}