Try using can (#25)

transcend-io · Mar 17, 2023 · 73847b6 · 73847b6
1 parent 9ae4dc3
commit 73847b6
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/main.tf b/main.tf
@@ -39,8 +39,8 @@ resource "aws_security_group" "service_security_group" {
     content {
       from_port       = ingress.value.container_port
       to_port         = ingress.value.container_port
-      security_groups = var.alb_security_group_ids
-      cidr_blocks     = var.ingress_cidr_blocks
+      security_groups = can(length(ingress.value.security_groups)) ? ingress.value.security_groups : var.alb_security_group_ids
+      cidr_blocks = can(length(ingress.value.cidr_blocks)) ? ingress.value.cidr_blocks : var.ingress_cidr_blocks
       protocol        = "tcp"
     }
   }

diff --git a/variables.tf b/variables.tf
@@ -72,6 +72,8 @@ variable "load_balancers" {
     target_group_arn = string
     container_name   = string
     container_port   = string
+    security_groups  = optional(list(string))
+    cidr_blocks      = optional(list(string))
   }))
 
   default     = []