ufo 6.3.5 → 6.3.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c7412fed5f36c54bd78f76bfb6debb841d3f867ea25ef4625a31c9e205a1e955
-  data.tar.gz: a0d91c95a050d2fbce2731c10387651fb2909c3dc65a4e2af60a6cf780d3e1b7
+  metadata.gz: 586d1502a32e9d1e3aa5a8447371c5b9fc854f189a841b9a822ce2cef4156c0b
+  data.tar.gz: 03607a2573b1a27c245f2b42614589513250fa91f2c8c69b5f8767664083aeb9
 SHA512:
-  metadata.gz: 6ee413ef0571f90417c37327d78fbb86c8fab10584746dfcbec86d292ce3f8dad8d31d53d3a939db6b9a2f91639d50ed4f876262d84c40c453ad22e610a7b46f
-  data.tar.gz: c8fe10ab749b98820faa9105584175b1c97cfcd7ecee92a1bf75e7d1623ed158c86b2ac32a834a8f4b617e252dca6c28682f8a3e4664f8dac03785117ab26bb8
+  metadata.gz: b9b72a9063f47a628cf5455f91a9db1f6db89e74416b54a30cd21724a010d4bd040e31b48caf4d2fec381e88d06d4efb8e8202b3d31e2ac7d8913e38a669ec1b
+  data.tar.gz: 29d841dd38e9ba2b2132adf00689b9e39eb34dcf3436601d70f7d78675f9b4eece5f08739a29ac9bfd6c0f3762ec4867d72ea9df1b681fe77f04290da3c498af

data/CHANGELOG.md

@@ -3,6 +3,9 @@
 All notable changes to this project will be documented in this file.
 This project *tries* to adhere to [Semantic Versioning](http://semver.org/), even before v1.0.
 
+## [6.3.6] - 2022-04-29
+- [#172](https://github.com/tongueroo/ufo/pull/172) support multiple ssl certs
+
 ## [6.3.5] - 2022-04-28
 - [#171](https://github.com/tongueroo/ufo/pull/171) default unhealthy_threshold_count = 3
 

data/lib/ufo/cfn/stack/builder/resources/listener_certificate.rb

@@ -0,0 +1,30 @@
+class Ufo::Cfn::Stack::Builder::Resources
+  class ListenerCertificate < ListenerSsl
+    def build
+      return unless certificates.size >= 1 # already removed firt cert
+      {
+        Type: "AWS::ElasticLoadBalancingV2::ListenerCertificate",
+        Condition: "CreateElbIsTrue",
+        Properties: properties,
+      }
+    end
+
+    def properties
+      {
+        Certificates: certificates,
+        ListenerArn: {Ref: "ListenerSsl"}
+      }
+    end
+
+    def certificates
+      ssl = Ufo.config.elb.ssl
+      certs = normalize(ssl.certificates) if ssl.certificates
+      # CloudFormation has weird interface
+      # Only one cert allowed at the AWS::ElasticLoadBalancingV2::Listener
+      # https://stackoverflow.com/questions/54447250/how-to-set-multiple-certificates-for-awselasticloadbalancingv2listener
+      # Also note the docs say "You can specify one certificate per resource."
+      # But tested and multiple certs here work
+      certs[1..-1] # dont include the first one
+    end
+  end
+end

data/lib/ufo/cfn/stack/builder/resources/listener_ssl.rb

@@ -7,7 +7,10 @@ class Ufo::Cfn::Stack::Builder::Resources
 
     def properties
       props = super
-      props[:Certificates] = certificates
+      # CloudFormation has weird interface
+      # Only one cert allowed at the AWS::ElasticLoadBalancingV2::Listener
+      # https://stackoverflow.com/questions/54447250/how-to-set-multiple-certificates-for-awselasticloadbalancingv2listener
+      props[:Certificates] = [certificates.first] # first one only
       props
     end
 

data/lib/ufo/cfn/stack/builder/resources.rb

@@ -10,6 +10,7 @@ class Ufo::Cfn::Stack::Builder
         ElbSecurityGroup: SecurityGroup::Elb.build(@options),
         ExecutionRole: IamRoles::ExecutionRole.build(@options),
         Listener: Listener.build(@options),
+        ListenerCertificate: ListenerCertificate.build(@options),
         ListenerSsl: ListenerSsl.build(@options),
         TargetGroup: TargetGroup.build(@options),
         TaskDefinition: TaskDefinition.build(@options),

data/lib/ufo/version.rb

@@ -1,3 +1,3 @@
 module Ufo
-  VERSION = "6.3.5"
+  VERSION = "6.3.6"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ufo
 version: !ruby/object:Gem::Version
-  version: 6.3.5
+  version: 6.3.6
 platform: ruby
 authors:
 - Tung Nguyen
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-04-28 00:00:00.000000000 Z
+date: 2022-04-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-logs
@@ -516,6 +516,7 @@ files:
 - lib/ufo/cfn/stack/builder/resources/iam_roles/execution_role.rb
 - lib/ufo/cfn/stack/builder/resources/iam_roles/task_role.rb
 - lib/ufo/cfn/stack/builder/resources/listener.rb
+- lib/ufo/cfn/stack/builder/resources/listener_certificate.rb
 - lib/ufo/cfn/stack/builder/resources/listener_ssl.rb
 - lib/ufo/cfn/stack/builder/resources/scaling/base.rb
 - lib/ufo/cfn/stack/builder/resources/scaling/policy.rb