feat: Add security group tag creation flag (aws-ia#1565)

gminiba · May 26, 2023 · 786849c · 786849c
1 parent 9a66580
commit 786849c
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 9 deletions.
diff --git a/main.tf b/main.tf
@@ -45,15 +45,16 @@ module "aws_eks" {
   cluster_ip_family                    = var.cluster_ip_family
   cluster_service_ipv4_cidr            = var.cluster_service_ipv4_cidr
 
-  vpc_id                                  = var.vpc_id
-  create_cluster_security_group           = var.create_cluster_security_group
-  cluster_security_group_id               = var.cluster_security_group_id
-  cluster_security_group_name             = var.cluster_security_group_name
-  cluster_security_group_use_name_prefix  = var.cluster_security_group_use_name_prefix
-  cluster_security_group_description      = var.cluster_security_group_description
-  cluster_additional_security_group_ids   = var.cluster_additional_security_group_ids
-  cluster_security_group_additional_rules = var.cluster_security_group_additional_rules
-  cluster_security_group_tags             = var.cluster_security_group_tags
+  vpc_id                                     = var.vpc_id
+  create_cluster_security_group              = var.create_cluster_security_group
+  cluster_security_group_id                  = var.cluster_security_group_id
+  cluster_security_group_name                = var.cluster_security_group_name
+  cluster_security_group_use_name_prefix     = var.cluster_security_group_use_name_prefix
+  cluster_security_group_description         = var.cluster_security_group_description
+  cluster_additional_security_group_ids      = var.cluster_additional_security_group_ids
+  cluster_security_group_additional_rules    = var.cluster_security_group_additional_rules
+  cluster_security_group_tags                = var.cluster_security_group_tags
+  create_cluster_primary_security_group_tags = var.create_cluster_primary_security_group_tags
 
   create_node_security_group           = var.create_node_security_group
   node_security_group_name             = var.node_security_group_name

diff --git a/variables.tf b/variables.tf
@@ -108,6 +108,12 @@ variable "cluster_security_group_tags" {
   default     = {}
 }
 
+variable "create_cluster_primary_security_group_tags" {
+  description = "Indicates whether or not to tag the cluster's primary security group. This security group is created by the EKS service, not the module, and therefore tagging is handled after cluster creation"
+  type        = bool
+  default     = true
+}
+
 #-------------------------------
 # EKS Cluster VPC Config
 #-------------------------------