fastly.TlsSubscription

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
import * as fastly from "@pulumi/fastly";
import * as std from "@pulumi/std";

// NOTE: Creating a hosted zone will automatically create SOA/NS records.
const production = new aws.index.Route53Zone("production", {name: "example.com"});
const example = new aws.index.Route53domainsRegisteredDomain("example", {
    nameServer: Object.entries(production.nameServers).map(([k, v]) => ({key: k, value: v})).map(entry => ({
        name: entry.value,
    })),
    domainName: "example.com",
});
const subdomains = [
    "a.example.com",
    "b.example.com",
];
const exampleServiceVcl = new fastly.ServiceVcl("example", {
    domains: subdomains.map((v, k) => ({key: k, value: v})).map(entry => ({
        name: entry.value,
    })),
    name: "example-service",
    backends: [{
        address: "127.0.0.1",
        name: "localhost",
    }],
    forceDestroy: true,
});
const exampleTlsSubscription = new fastly.TlsSubscription("example", {
    domains: exampleServiceVcl.domains.apply(domains => .map(domain => (domain.name))),
    certificateAuthority: "lets-encrypt",
});
const domainValidation: aws.index.Route53Record[] = [];
exampleTlsSubscription.domains.apply(domains => {
    for (const range of Object.entries(domains.reduce((__obj, domain) => ({ ...__obj, [domain]: exampleTlsSubscription.managedDnsChallenges.apply(managedDnsChallenges => managedDnsChallenges.filter(obj => obj.recordName == `_acme-challenge.${domain}`).map(obj => (obj)))[0] }))).map(([k, v]) => ({key: k, value: v}))) {
        domainValidation.push(new aws.index.Route53Record(`domain_validation-${range.key}`, {
            name: range.value.recordName,
            type: range.value.recordType,
            zoneId: production.zoneId,
            allowOverwrite: true,
            records: [range.value.recordValue],
            ttl: 60,
        }, {
        dependsOn: [exampleTlsSubscription],
    }));
    }
});
// This is a resource that other resources can depend on if they require the certificate to be issued.
// NOTE: Internally the resource keeps retrying `GetTLSSubscription` until no error is returned (or the configured timeout is reached).
const exampleTlsSubscriptionValidation = new fastly.TlsSubscriptionValidation("example", {subscriptionId: exampleTlsSubscription.id}, {
    dependsOn: [domainValidation],
});
// This data source lists all available configuration objects.
// It uses a `default` attribute to narrow down the list to just one configuration object.
// If the filtered list has a length that is not exactly one element, you'll see an error returned.
// The single TLS configuration is then returned and can be referenced by other resources (see aws_route53_record below).
//
// IMPORTANT: Not all customers will have a 'default' configuration.
// If you have issues filtering with `default = true`, then you may need another attribute.
// Refer to the fastly_tls_configuration documentation for available attributes:
// https://registry.terraform.io/providers/fastly/fastly/latest/docs/data-sources/tls_configuration#optional
const defaultTls = fastly.getTlsConfiguration({
    "default": true,
});
// Once validation is complete and we've retrieved the TLS configuration data, we can create multiple subdomain records.
const subdomain: aws.index.Route53Record[] = [];
for (const range = {value: 0}; range.value < std.index.toset({
    input: subdomains,
}).result; range.value++) {
    subdomain.push(new aws.index.Route53Record(`subdomain-${range.value}`, {
        name: range.value,
        records: .filter(record => record.recordType == "CNAME").map(record => (record.recordValue)),
        ttl: 300,
        type: "CNAME",
        zoneId: production.zoneId,
    }));
}

import pulumi
import pulumi_aws as aws
import pulumi_fastly as fastly
import pulumi_std as std

# NOTE: Creating a hosted zone will automatically create SOA/NS records.
production = aws.index.Route53Zone("production", name=example.com)
example = aws.index.Route53domainsRegisteredDomain("example",
    name_server=[{
        name: entry.value,
    } for entry in [{"key": k, "value": v} for k, v in production.name_servers]],
    domain_name=example.com)
subdomains = [
    "a.example.com",
    "b.example.com",
]
example_service_vcl = fastly.ServiceVcl("example",
    domains=[{
        "name": entry["value"],
    } for entry in [{"key": k, "value": v} for k, v in subdomains]],
    name="example-service",
    backends=[{
        "address": "127.0.0.1",
        "name": "localhost",
    }],
    force_destroy=True)
example_tls_subscription = fastly.TlsSubscription("example",
    domains=example_service_vcl.domains.apply(lambda domains: [domain.name for domain in domains]),
    certificate_authority="lets-encrypt")
domain_validation = []
def create_domain_validation(range_body):
    for range in [{"key": k, "value": v} for [k, v] in enumerate(range_body)]:
        domain_validation.append(aws.index.Route53Record(f"domain_validation-{range['key']}",
            name=range.value.record_name,
            type=range.value.record_type,
            zone_id=production.zone_id,
            allow_overwrite=True,
            records=[range.value.record_value],
            ttl=60,
            opts = pulumi.ResourceOptions(depends_on=[example_tls_subscription])))

example_tls_subscription.domains.apply(lambda resolved_outputs: create_domain_validation({domain: example_tls_subscription.managed_dns_challenges.apply(lambda managed_dns_challenges: [obj for obj in managed_dns_challenges if obj.record_name == f"_acme-challenge.{domain}"])[0] for domain in resolved_outputs['domains']}))
# This is a resource that other resources can depend on if they require the certificate to be issued.
# NOTE: Internally the resource keeps retrying `GetTLSSubscription` until no error is returned (or the configured timeout is reached).
example_tls_subscription_validation = fastly.TlsSubscriptionValidation("example", subscription_id=example_tls_subscription.id,
opts = pulumi.ResourceOptions(depends_on=[domain_validation]))
# This data source lists all available configuration objects.
# It uses a `default` attribute to narrow down the list to just one configuration object.
# If the filtered list has a length that is not exactly one element, you'll see an error returned.
# The single TLS configuration is then returned and can be referenced by other resources (see aws_route53_record below).
#
# IMPORTANT: Not all customers will have a 'default' configuration.
# If you have issues filtering with `default = true`, then you may need another attribute.
# Refer to the fastly_tls_configuration documentation for available attributes:
# https://registry.terraform.io/providers/fastly/fastly/latest/docs/data-sources/tls_configuration#optional
default_tls = fastly.get_tls_configuration(default=True)
# Once validation is complete and we've retrieved the TLS configuration data, we can create multiple subdomain records.
subdomain = []
for range in [{"value": i} for i in range(0, std.index.toset(input=subdomains).result)]:
    subdomain.append(aws.index.Route53Record(f"subdomain-{range['value']}",
        name=range.value,
        records=[record.record_value for record in default_tls.dns_records if record.record_type == CNAME],
        ttl=300,
        type=CNAME,
        zone_id=production.zone_id))

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
using Fastly = Pulumi.Fastly;
using Std = Pulumi.Std;

return await Deployment.RunAsync(() => 
{
    // NOTE: Creating a hosted zone will automatically create SOA/NS records.
    var production = new Aws.Index.Route53Zone("production", new()
    {
        Name = "example.com",
    });

    var example = new Aws.Index.Route53domainsRegisteredDomain("example", new()
    {
        NameServer = .Select(entry => 
        {
            return 
            {
                { "name", entry.Value },
            };
        }).ToList(),
        DomainName = "example.com",
    });

    var subdomains = new[]
    {
        "a.example.com",
        "b.example.com",
    };

    var exampleServiceVcl = new Fastly.ServiceVcl("example", new()
    {
        Domains = subdomains.Select((v, k) => new { Key = k, Value = v }).Select(entry => 
        {
            return new Fastly.Inputs.ServiceVclDomainArgs
            {
                Name = entry.Value,
            };
        }).ToList(),
        Name = "example-service",
        Backends = new[]
        {
            new Fastly.Inputs.ServiceVclBackendArgs
            {
                Address = "127.0.0.1",
                Name = "localhost",
            },
        },
        ForceDestroy = true,
    });

    var exampleTlsSubscription = new Fastly.TlsSubscription("example", new()
    {
        Domains = exampleServiceVcl.Domains.Apply(domains => .Select(domain => 
        {
            return domain.Name;
        }).ToList()),
        CertificateAuthority = "lets-encrypt",
    });

    var domainValidation = new List<Aws.Index.Route53Record>();
    foreach (var range in exampleTlsSubscription.Domains.Apply(domains => domains.ToDictionary(item => {
        var domain = item.Value;
        return domain;
    }, item => {
        var domain = item.Value;
        return exampleTlsSubscription.ManagedDnsChallenges.Apply(managedDnsChallenges => managedDnsChallenges.Where(obj => obj.RecordName == $"_acme-challenge.{domain}").Select(obj => 
        {
            return obj;
        }).ToList())[0];
    })).Select(pair => new { pair.Key, pair.Value }))
    {
        domainValidation.Add(new Aws.Index.Route53Record($"domain_validation-{range.Key}", new()
        {
            Name = range.Value.RecordName,
            Type = range.Value.RecordType,
            ZoneId = production.ZoneId,
            AllowOverwrite = true,
            Records = new[]
            {
                range.Value.RecordValue,
            },
            Ttl = 60,
        }, new CustomResourceOptions
        {
            DependsOn =
            {
                exampleTlsSubscription,
            },
        }));
    }
    // This is a resource that other resources can depend on if they require the certificate to be issued.
    // NOTE: Internally the resource keeps retrying `GetTLSSubscription` until no error is returned (or the configured timeout is reached).
    var exampleTlsSubscriptionValidation = new Fastly.TlsSubscriptionValidation("example", new()
    {
        SubscriptionId = exampleTlsSubscription.Id,
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            domainValidation,
        },
    });

    // This data source lists all available configuration objects.
    // It uses a `default` attribute to narrow down the list to just one configuration object.
    // If the filtered list has a length that is not exactly one element, you'll see an error returned.
    // The single TLS configuration is then returned and can be referenced by other resources (see aws_route53_record below).
    //
    // IMPORTANT: Not all customers will have a 'default' configuration.
    // If you have issues filtering with `default = true`, then you may need another attribute.
    // Refer to the fastly_tls_configuration documentation for available attributes:
    // https://registry.terraform.io/providers/fastly/fastly/latest/docs/data-sources/tls_configuration#optional
    var defaultTls = Fastly.GetTlsConfiguration.Invoke(new()
    {
        Default = true,
    });

    // Once validation is complete and we've retrieved the TLS configuration data, we can create multiple subdomain records.
    var subdomain = new List<Aws.Index.Route53Record>();
    for (var rangeIndex = 0; rangeIndex < Std.Index.Toset.Invoke(new()
    {
        Input = subdomains,
    }).Result; rangeIndex++)
    {
        var range = new { Value = rangeIndex };
        subdomain.Add(new Aws.Index.Route53Record($"subdomain-{range.Value}", new()
        {
            Name = range.Value,
            Records = ,
            Ttl = 300,
            Type = "CNAME",
            ZoneId = production.ZoneId,
        }));
    }
});

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
import * as fastly from "@pulumi/fastly";
import * as std from "@pulumi/std";

// NOTE: Creating a hosted zone will automatically create SOA/NS records.
const production = new aws.index.Route53Zone("production", {name: "example.com"});
const example = new aws.index.Route53domainsRegisteredDomain("example", {
    nameServer: Object.entries(production.nameServers).map(([k, v]) => ({key: k, value: v})).map(entry => ({
        name: entry.value,
    })),
    domainName: "example.com",
});
const domains = [
    "example.com",
    "*.example.com",
];
const exampleServiceVcl = new fastly.ServiceVcl("example", {
    domains: domains.map((v, k) => ({key: k, value: v})).map(entry => ({
        name: entry.value,
    })),
    name: "example-service",
    backends: [{
        address: "127.0.0.1",
        name: "localhost",
    }],
    forceDestroy: true,
});
const exampleTlsSubscription = new fastly.TlsSubscription("example", {
    domains: exampleServiceVcl.domains.apply(domains => .map(domain => (domain.name))),
    certificateAuthority: "lets-encrypt",
});
const domainValidation: aws.index.Route53Record[] = [];
exampleTlsSubscription.domains.apply(domains => {
    const domainValidation: aws.index.Route53Record[] = [];
pulumi.all(domains.reduce((__obj, domain) => ({ ...__obj, [std.index.replace({
        text: domain,
        search: "*.",
        replace: "",
    }).result]: exampleTlsSubscription.managedDnsChallenges.apply(managedDnsChallenges => managedDnsChallenges.filter(obj => obj.recordName == `_acme-challenge.${std.index.replace({
        text: domain,
        search: "*.",
        replace: "",
    }).result}`).map(obj => (obj)))[0] }))).apply(rangeBody => {
        for (const range of Object.entries(rangeBody).map(([k, v]) => ({key: k, value: v}))) {
            domainValidation.push(new aws.index.Route53Record(`domain_validation-${range.key}`, {
                name: range.value[0].recordName,
                type: range.value[0].recordType,
                zoneId: production.zoneId,
                allowOverwrite: true,
                records: [range.value[0].recordValue],
                ttl: 60,
            }, {
            dependsOn: [exampleTlsSubscription],
        }));
        }
    });
});
// This is a resource that other resources can depend on if they require the certificate to be issued.
// NOTE: Internally the resource keeps retrying `GetTLSSubscription` until no error is returned (or the configured timeout is reached).
const exampleTlsSubscriptionValidation = new fastly.TlsSubscriptionValidation("example", {subscriptionId: exampleTlsSubscription.id}, {
    dependsOn: [domainValidation],
});
// This data source lists all available configuration objects.
// It uses a `default` attribute to narrow down the list to just one configuration object.
// If the filtered list has a length that is not exactly one element, you'll see an error returned.
// The single TLS configuration is then returned and can be referenced by other resources (see aws_route53_record below).
//
// IMPORTANT: Not all customers will have a 'default' configuration.
// If you have issues filtering with `default = true`, then you may need another attribute.
// Refer to the fastly_tls_configuration documentation for available attributes:
// https://registry.terraform.io/providers/fastly/fastly/latest/docs/data-sources/tls_configuration#optional
const defaultTls = fastly.getTlsConfiguration({
    "default": true,
});
// Once validation is complete and we've retrieved the TLS configuration data, we can create multiple records...
const apex = new aws.index.Route53Record("apex", {
    name: "example.com",
    records: .filter(record => record.recordType == "A").map(record => (record.recordValue)),
    ttl: 300,
    type: "A",
    zoneId: production.zoneId,
});
// NOTE: This subdomain matches our Fastly service because of the wildcard domain (`*.example.com`) that was added to the service.
const subdomain = new aws.index.Route53Record("subdomain", {
    name: "test.example.com",
    records: .filter(record => record.recordType == "CNAME").map(record => (record.recordValue)),
    ttl: 300,
    type: "CNAME",
    zoneId: production.zoneId,
});

import pulumi
import pulumi_aws as aws
import pulumi_fastly as fastly
import pulumi_std as std

# NOTE: Creating a hosted zone will automatically create SOA/NS records.
production = aws.index.Route53Zone("production", name=example.com)
example = aws.index.Route53domainsRegisteredDomain("example",
    name_server=[{
        name: entry.value,
    } for entry in [{"key": k, "value": v} for k, v in production.name_servers]],
    domain_name=example.com)
domains = [
    "example.com",
    "*.example.com",
]
example_service_vcl = fastly.ServiceVcl("example",
    domains=[{
        "name": entry["value"],
    } for entry in [{"key": k, "value": v} for k, v in domains]],
    name="example-service",
    backends=[{
        "address": "127.0.0.1",
        "name": "localhost",
    }],
    force_destroy=True)
example_tls_subscription = fastly.TlsSubscription("example",
    domains=example_service_vcl.domains.apply(lambda domains: [domain.name for domain in domains]),
    certificate_authority="lets-encrypt")
domain_validation = []
def create_domain_validation(range_body):
    for range in [{"key": k, "value": v} for [k, v] in enumerate(range_body)]:
        domain_validation.append(aws.index.Route53Record(f"domain_validation-{range['key']}",
            name=range.value[0].record_name,
            type=range.value[0].record_type,
            zone_id=production.zone_id,
            allow_overwrite=True,
            records=[range.value[0].record_value],
            ttl=60,
            opts = pulumi.ResourceOptions(depends_on=[example_tls_subscription])))

example_tls_subscription.domains.apply(lambda resolved_outputs: create_domain_validation({std.index.replace(text=domain,
    search="*.",
    replace="")["result"]: example_tls_subscription.managed_dns_challenges.apply(lambda managed_dns_challenges: [obj for obj in managed_dns_challenges if obj.record_name == f"_acme-challenge.{std.index.replace(text=domain,
    search='*.',
    replace='')['result']}"])[0] for domain in resolved_outputs['domains']}))
# This is a resource that other resources can depend on if they require the certificate to be issued.
# NOTE: Internally the resource keeps retrying `GetTLSSubscription` until no error is returned (or the configured timeout is reached).
example_tls_subscription_validation = fastly.TlsSubscriptionValidation("example", subscription_id=example_tls_subscription.id,
opts = pulumi.ResourceOptions(depends_on=[domain_validation]))
# This data source lists all available configuration objects.
# It uses a `default` attribute to narrow down the list to just one configuration object.
# If the filtered list has a length that is not exactly one element, you'll see an error returned.
# The single TLS configuration is then returned and can be referenced by other resources (see aws_route53_record below).
#
# IMPORTANT: Not all customers will have a 'default' configuration.
# If you have issues filtering with `default = true`, then you may need another attribute.
# Refer to the fastly_tls_configuration documentation for available attributes:
# https://registry.terraform.io/providers/fastly/fastly/latest/docs/data-sources/tls_configuration#optional
default_tls = fastly.get_tls_configuration(default=True)
# Once validation is complete and we've retrieved the TLS configuration data, we can create multiple records...
apex = aws.index.Route53Record("apex",
    name=example.com,
    records=[record.record_value for record in default_tls.dns_records if record.record_type == A],
    ttl=300,
    type=A,
    zone_id=production.zone_id)
# NOTE: This subdomain matches our Fastly service because of the wildcard domain (`*.example.com`) that was added to the service.
subdomain = aws.index.Route53Record("subdomain",
    name=test.example.com,
    records=[record.record_value for record in default_tls.dns_records if record.record_type == CNAME],
    ttl=300,
    type=CNAME,
    zone_id=production.zone_id)

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
using Fastly = Pulumi.Fastly;
using Std = Pulumi.Std;

return await Deployment.RunAsync(() => 
{
    // NOTE: Creating a hosted zone will automatically create SOA/NS records.
    var production = new Aws.Index.Route53Zone("production", new()
    {
        Name = "example.com",
    });

    var example = new Aws.Index.Route53domainsRegisteredDomain("example", new()
    {
        NameServer = .Select(entry => 
        {
            return 
            {
                { "name", entry.Value },
            };
        }).ToList(),
        DomainName = "example.com",
    });

    var domains = new[]
    {
        "example.com",
        "*.example.com",
    };

    var exampleServiceVcl = new Fastly.ServiceVcl("example", new()
    {
        Domains = domains.Select((v, k) => new { Key = k, Value = v }).Select(entry => 
        {
            return new Fastly.Inputs.ServiceVclDomainArgs
            {
                Name = entry.Value,
            };
        }).ToList(),
        Name = "example-service",
        Backends = new[]
        {
            new Fastly.Inputs.ServiceVclBackendArgs
            {
                Address = "127.0.0.1",
                Name = "localhost",
            },
        },
        ForceDestroy = true,
    });

    var exampleTlsSubscription = new Fastly.TlsSubscription("example", new()
    {
        Domains = exampleServiceVcl.Domains.Apply(domains => .Select(domain => 
        {
            return domain.Name;
        }).ToList()),
        CertificateAuthority = "lets-encrypt",
    });

    var domainValidation = new List<Aws.Index.Route53Record>();
    foreach (var range in exampleTlsSubscription.Domains.Apply(domains => domains).Select(pair => new { pair.Key, pair.Value }))
    {
        domainValidation.Add(new Aws.Index.Route53Record($"domain_validation-{range.Key}", new()
        {
            Name = range.Value[0].RecordName,
            Type = range.Value[0].RecordType,
            ZoneId = production.ZoneId,
            AllowOverwrite = true,
            Records = new[]
            {
                range.Value[0].RecordValue,
            },
            Ttl = 60,
        }, new CustomResourceOptions
        {
            DependsOn =
            {
                exampleTlsSubscription,
            },
        }));
    }
    // This is a resource that other resources can depend on if they require the certificate to be issued.
    // NOTE: Internally the resource keeps retrying `GetTLSSubscription` until no error is returned (or the configured timeout is reached).
    var exampleTlsSubscriptionValidation = new Fastly.TlsSubscriptionValidation("example", new()
    {
        SubscriptionId = exampleTlsSubscription.Id,
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            domainValidation,
        },
    });

    // This data source lists all available configuration objects.
    // It uses a `default` attribute to narrow down the list to just one configuration object.
    // If the filtered list has a length that is not exactly one element, you'll see an error returned.
    // The single TLS configuration is then returned and can be referenced by other resources (see aws_route53_record below).
    //
    // IMPORTANT: Not all customers will have a 'default' configuration.
    // If you have issues filtering with `default = true`, then you may need another attribute.
    // Refer to the fastly_tls_configuration documentation for available attributes:
    // https://registry.terraform.io/providers/fastly/fastly/latest/docs/data-sources/tls_configuration#optional
    var defaultTls = Fastly.GetTlsConfiguration.Invoke(new()
    {
        Default = true,
    });

    // Once validation is complete and we've retrieved the TLS configuration data, we can create multiple records...
    var apex = new Aws.Index.Route53Record("apex", new()
    {
        Name = "example.com",
        Records = ,
        Ttl = 300,
        Type = "A",
        ZoneId = production.ZoneId,
    });

    // NOTE: This subdomain matches our Fastly service because of the wildcard domain (`*.example.com`) that was added to the service.
    var subdomain = new Aws.Index.Route53Record("subdomain", new()
    {
        Name = "test.example.com",
        Records = ,
        Ttl = 300,
        Type = "CNAME",
        ZoneId = production.ZoneId,
    });

});

var tlsSubscriptionResource = new Fastly.TlsSubscription("tlsSubscriptionResource", new()
{
    CertificateAuthority = "string",
    Domains = new[]
    {
        "string",
    },
    CommonName = "string",
    ConfigurationId = "string",
    ForceDestroy = false,
    ForceUpdate = false,
});

example, err := fastly.NewTlsSubscription(ctx, "tlsSubscriptionResource", &fastly.TlsSubscriptionArgs{
	CertificateAuthority: pulumi.String("string"),
	Domains: pulumi.StringArray{
		pulumi.String("string"),
	},
	CommonName:      pulumi.String("string"),
	ConfigurationId: pulumi.String("string"),
	ForceDestroy:    pulumi.Bool(false),
	ForceUpdate:     pulumi.Bool(false),
})

var tlsSubscriptionResource = new TlsSubscription("tlsSubscriptionResource", TlsSubscriptionArgs.builder()
    .certificateAuthority("string")
    .domains("string")
    .commonName("string")
    .configurationId("string")
    .forceDestroy(false)
    .forceUpdate(false)
    .build());

tls_subscription_resource = fastly.TlsSubscription("tlsSubscriptionResource",
    certificate_authority="string",
    domains=["string"],
    common_name="string",
    configuration_id="string",
    force_destroy=False,
    force_update=False)

const tlsSubscriptionResource = new fastly.TlsSubscription("tlsSubscriptionResource", {
    certificateAuthority: "string",
    domains: ["string"],
    commonName: "string",
    configurationId: "string",
    forceDestroy: false,
    forceUpdate: false,
});

type: fastly:TlsSubscription
properties:
    certificateAuthority: string
    commonName: string
    configurationId: string
    domains:
        - string
    forceDestroy: false
    forceUpdate: false