resource "xcsh_origin_pool" "example" {
  name        = var.name
  namespace   = data.xcsh_namespace.existing.name
  description = var.description
  labels      = { certificate-example = "terraform" }
  port        = 443
  origin_servers {
    public_name {
      dns_name = var.origin_hostname
    }
  }
  use_tls {
    sni = var.origin_hostname
    tls_config {
      default_security = {}
    }
    use_mtls {
      tls_certificates {
        blindfold = { id = "server", certificate_file = var.certificate_file, private_key_file = var.private_key_file }
      }
    }
    use_server_verification {
      trusted_ca_url = "string:///${filebase64(var.origin_ca_file)}"
    }
  }
}