terraform: yank old tls configurations
Martin Weinelt committed
Nov 14, 2025 at 05:24 UTC
8d951a60966bfb75838aae38168365763109a58d
5 files changed
+4
-34
terraform/cache-staging.tf
-6
@@ -347,12 +347,6 @@ EOT
347
}
348
}
349
350
-resource "fastly_tls_subscription" "cache-staging" {
351
- domains = [for domain in fastly_service_vcl.cache-staging.domain : domain.name]
352
- configuration_id = local.fastly_tls12_sni_configuration_id
353
- certificate_authority = "globalsign"
354
-}
355
-
350
resource "fastly_tls_subscription" "cache-staging-2025-11" {
351
domains = [for domain in fastly_service_vcl.cache-staging.domain : domain.name]
352
configuration_id = local.fastly_tls13_quic_configuration_id
terraform/cache.tf
+1
-7
@@ -299,12 +299,6 @@ resource "fastly_service_vcl" "cache" {
299
}
300
}
301
302
-resource "fastly_tls_subscription" "cache" {
303
- domains = [for domain in fastly_service_vcl.cache.domain : domain.name]
304
- configuration_id = local.fastly_tls12_sni_configuration_id
305
- certificate_authority = "globalsign"
306
-}
307
-
302
resource "fastly_tls_subscription" "cache-2025-11" {
303
domains = [for domain in fastly_service_vcl.cache.domain : domain.name]
304
configuration_id = local.fastly_tls13_quic_configuration_id
@@ -312,5 +306,5 @@ resource "fastly_tls_subscription" "cache-2025-11" {
306
}
307
308
output "cache-managed_dns_challenge" {
315
- value = fastly_tls_subscription.cache.managed_dns_challenges
309
+ value = fastly_tls_subscription.cache-2025-11.managed_dns_challenges
310
}
terraform/channels.tf
+1
-7
@@ -290,12 +290,6 @@ resource "fastly_service_vcl" "channels" {
290
}
291
}
292
293
-resource "fastly_tls_subscription" "channels" {
294
- domains = [for domain in fastly_service_vcl.channels.domain : domain.name]
295
- configuration_id = local.fastly_tls12_sni_configuration_id
296
- certificate_authority = "globalsign"
297
-}
298
-
293
resource "fastly_tls_subscription" "channels-2025-11" {
294
domains = [for domain in fastly_service_vcl.channels.domain : domain.name]
295
configuration_id = local.fastly_tls13_quic_configuration_id
@@ -303,5 +297,5 @@ resource "fastly_tls_subscription" "channels-2025-11" {
297
}
298
299
output "channels-managed_dns_challenge" {
306
- value = fastly_tls_subscription.channels.managed_dns_challenges
300
+ value = fastly_tls_subscription.channels-2025-11.managed_dns_challenges
301
}
terraform/nixpkgs-tarballs.tf
+1
-7
@@ -286,12 +286,6 @@ resource "fastly_service_vcl" "nixpkgs-tarballs" {
286
}
287
}
288
289
-resource "fastly_tls_subscription" "nixpkgs-tarballs" {
290
- domains = [for domain in fastly_service_vcl.nixpkgs-tarballs.domain : domain.name]
291
- configuration_id = local.fastly_tls12_sni_configuration_id
292
- certificate_authority = "globalsign"
293
-}
294
-
289
resource "fastly_tls_subscription" "nixpkgs-tarballs-2025-11" {
290
domains = [for domain in fastly_service_vcl.nixpkgs-tarballs.domain : domain.name]
291
configuration_id = local.fastly_tls13_quic_configuration_id
@@ -299,7 +293,7 @@ resource "fastly_tls_subscription" "nixpkgs-tarballs-2025-11" {
293
}
294
295
output "nixpkgs-tarballs-managed_dns_challenge" {
302
- value = fastly_tls_subscription.nixpkgs-tarballs.managed_dns_challenges
296
+ value = fastly_tls_subscription.nixpkgs-tarballs-2025-11.managed_dns_challenges
297
}
298
299
# Create an S3 bucket for CloudTrail logs
terraform/releases.tf
+1
-7
@@ -255,12 +255,6 @@ resource "fastly_service_vcl" "releases" {
255
}
256
}
257
258
-resource "fastly_tls_subscription" "releases" {
259
- domains = [for domain in fastly_service_vcl.releases.domain : domain.name]
260
- configuration_id = local.fastly_tls12_sni_configuration_id
261
- certificate_authority = "globalsign"
262
-}
263
-
258
resource "fastly_tls_subscription" "releases-2025-11" {
259
domains = [for domain in fastly_service_vcl.releases.domain : domain.name]
260
configuration_id = local.fastly_tls13_quic_configuration_id
@@ -268,5 +262,5 @@ resource "fastly_tls_subscription" "releases-2025-11" {
262
}
263
264
output "releases-managed_dns_challenge" {
271
- value = fastly_tls_subscription.releases.managed_dns_challenges
265
+ value = fastly_tls_subscription.releases-2025-11.managed_dns_challenges
266
}