From 793596c61dd7836a0aded6bf1797d35b911e3e0e Mon Sep 17 00:00:00 2001
From: Julio Diez <jdiez@google.com>
Date: Thu, 26 Jan 2023 12:25:54 +0100
Subject: [PATCH] Add HTTPS frontend with SNEG example

---
 modules/net-glb/README.md | 40 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)

diff --git a/modules/net-glb/README.md b/modules/net-glb/README.md
index 4b6d2435..12584b46 100644
--- a/modules/net-glb/README.md
+++ b/modules/net-glb/README.md
@@ -438,6 +438,46 @@ module "glb-0" {
 # tftest modules=1 resources=5
 ```
 
+Serverless NEGs don't use the port name but it should be set to `http`. An HTTPS frontend requires the protocol to be set to `HTTPS`, and the port name field will infer this value if omitted so you need to set it explicitly:
+
+```hcl
+module "glb-0" {
+  source     = "./fabric/modules/net-glb"
+  project_id = "myprj"
+  name       = "glb-test-0"
+  backend_service_configs = {
+    default = {
+      backends = [
+        { backend = "neg-0" }
+      ]
+      health_checks = []
+      port_name = "http"
+    }
+  }
+  # with a single serverless NEG the implied default health check is not needed
+  health_check_configs = {}
+  neg_configs = {
+    neg-0 = {
+      cloudrun = {
+        region = "europe-west8"
+        target_service = {
+          name = "hello"
+        }
+      }
+    }
+  }
+  protocol = "HTTPS"
+  ssl_certificates = {
+    managed_configs = {
+      default = {
+        domains = ["glb-test-0.example.org"]
+      }
+    }
+  }
+}
+# tftest ...
+```
+
 ### URL Map
 
 The module exposes the full URL map resource configuration, with some minor changes to the interface to decrease verbosity, and support for aliasing backend services via keys.