feat: Add tags to EKS created cluster security group to match rest of module tagging scheme (terraform-aws-modules#1957)

bryantbiggs · it-without-politics · commit f337d4fce471 · 2022-05-23T12:39:19.000+03:00
diff --git a/README.md b/README.md
@@ -827,6 +827,7 @@ Full contributing [guidelines are covered here](https://github.com/terraform-aws
 | Name | Type |
 |------|------|
 | [aws_cloudwatch_log_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group) | resource |
+| [aws_ec2_tag.cluster_primary_security_group](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ec2_tag) | resource |
 | [aws_eks_addon.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eks_addon) | resource |
 | [aws_eks_cluster.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eks_cluster) | resource |
 | [aws_eks_identity_provider_config.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eks_identity_provider_config) | resource |
diff --git a/main.tf b/main.tf
@@ -55,6 +55,14 @@ resource "aws_eks_cluster" "this" {
   ]
 }
 
+resource "aws_ec2_tag" "cluster_primary_security_group" {
+  for_each = { for k, v in merge(var.tags, var.cluster_tags) : k => v if var.create }
+
+  resource_id = aws_eks_cluster.this[0].vpc_config[0].cluster_security_group_id
+  key         = each.key
+  value       = each.value
+}
+
 resource "aws_cloudwatch_log_group" "this" {
   count = var.create && var.create_cloudwatch_log_group ? 1 : 0
 

Original file line number	Diff line number	Diff line change
`@@ -55,6 +55,14 @@ resource "aws_eks_cluster" "this" {`
`55`	`55`	`]`
`56`	`56`	`}`
`57`	`57`
	`58`	`+resource "aws_ec2_tag" "cluster_primary_security_group" {`
	`59`	`+ for_each = { for k, v in merge(var.tags, var.cluster_tags) : k => v if var.create }`
	`60`	`+`
	`61`	`+ resource_id = aws_eks_cluster.this[0].vpc_config[0].cluster_security_group_id`
	`62`	`+ key = each.key`
	`63`	`+ value = each.value`
	`64`	`+}`
	`65`	`+`
`58`	`66`	`resource "aws_cloudwatch_log_group" "this" {`
`59`	`67`	`count = var.create && var.create_cloudwatch_log_group ? 1 : 0`
`60`	`68`