feat: Add tags to EKS created cluster security group to match rest of module tagging scheme (#1957)

bryantbiggs · web-flow · commit 9371a2943b13 · 2022-03-24T08:05:59.000+01:00
diff --git a/README.md b/README.md
@@ -829,6 +829,7 @@ Full contributing [guidelines are covered here](https://github.com/terraform-aws
 | Name | Type |
 |------|------|
 | [aws_cloudwatch_log_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group) | resource |
+| [aws_ec2_tag.cluster_primary_security_group](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ec2_tag) | resource |
 | [aws_eks_addon.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eks_addon) | resource |
 | [aws_eks_cluster.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eks_cluster) | resource |
 | [aws_eks_identity_provider_config.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eks_identity_provider_config) | resource |
diff --git a/main.tf b/main.tf
@@ -59,6 +59,14 @@ resource "aws_eks_cluster" "this" {
   ]
 }
 
+resource "aws_ec2_tag" "cluster_primary_security_group" {
+  for_each = { for k, v in merge(var.tags, var.cluster_tags) : k => v if var.create }
+
+  resource_id = aws_eks_cluster.this[0].vpc_config[0].cluster_security_group_id
+  key         = each.key
+  value       = each.value
+}
+
 resource "aws_cloudwatch_log_group" "this" {
   count = local.create && var.create_cloudwatch_log_group ? 1 : 0
 

Original file line number	Diff line number	Diff line change
`@@ -59,6 +59,14 @@ resource "aws_eks_cluster" "this" {`
`59`	`59`	`]`
`60`	`60`	`}`
`61`	`61`
	`62`	`+resource "aws_ec2_tag" "cluster_primary_security_group" {`
	`63`	`+ for_each = { for k, v in merge(var.tags, var.cluster_tags) : k => v if var.create }`
	`64`	`+`
	`65`	`+ resource_id = aws_eks_cluster.this[0].vpc_config[0].cluster_security_group_id`
	`66`	`+ key = each.key`
	`67`	`+ value = each.value`
	`68`	`+}`
	`69`	`+`
`62`	`70`	`resource "aws_cloudwatch_log_group" "this" {`
`63`	`71`	`count = local.create && var.create_cloudwatch_log_group ? 1 : 0`
`64`	`72`