Introduce new optional variable to attach additional security groups …

…to LBs
appuio · Dec 16, 2024 · 1907c59 · 1907c59
1 parent 574c399
commit 1907c59
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 3 deletions.
diff --git a/lb.tf b/lb.tf
@@ -21,9 +21,10 @@ module "lb" {
   enable_proxy_protocol = var.lb_enable_proxy_protocol
   additional_networks   = var.additional_lb_networks
 
-  cluster_security_group_ids = [
-    exoscale_security_group.all_machines.id
-  ]
+  cluster_security_group_ids = concat(
+    [exoscale_security_group.all_machines.id],
+    var.additional_lb_security_group_ids
+  )
 
   additional_affinity_group_ids = var.additional_affinity_group_ids
 

diff --git a/variables.tf b/variables.tf
@@ -232,3 +232,9 @@ variable "additional_lb_networks" {
   description = "List of UUIDs of additional Exoscale private networks to attach"
   default     = []
 }
+
+variable "additional_lb_security_group_ids" {
+  type        = list(string)
+  default     = []
+  description = "List of additional security group IDs to configure on the LBs"
+}