Allow creation of the security group rule to be disabled (#10)

common-fate · Sep 23, 2024 · 55ab27b · 55ab27b
1 parent 8341309
commit 55ab27b
Show file tree

Hide file tree

Showing 5 changed files with 475 additions and 662 deletions.
diff --git a/.changeset/good-geese-appear.md b/.changeset/good-geese-appear.md
@@ -0,0 +1,5 @@
+---
+"@common-fate/terraform-commonfate-proxy-resource-rds": minor
+---
+
+Allow creation of the security group rule to be disabled, by setting the 'create_security_group_rule' variable to false.
diff --git a/.terraform.lock.hcl b/.terraform.lock.hcl
diff --git a/main.tf b/main.tf
@@ -32,6 +32,7 @@ data "aws_db_instance" "database" {
 
 // Add network access for the proxy to the database instance
 resource "aws_security_group_rule" "postgres_access_from_proxy" {
+  count                    = var.create_security_group_rule ? 1 : 0
   type                     = "ingress"
   from_port                = data.aws_db_instance.database.port
   to_port                  = data.aws_db_instance.database.port