Merge pull request #8 from data-platform-hq/fix_switch_nsg_association_to_count_condition

fix: switched nsg association to count condition

Author: owlleg6

main.tf

@@ -21,8 +21,8 @@ resource "azurerm_subnet" "this" {
 }
 
 resource "azurerm_subnet_network_security_group_association" "this" {
-  for_each = var.nsg_id
+  count = var.nsg_association_enabled ? 1 : 0
 
   subnet_id                 = var.export_subnet_id == null ? azurerm_subnet.this[0].id : var.export_subnet_id
-  network_security_group_id = each.value
+  network_security_group_id = var.nsg_id
 }

variables.tf

@@ -44,10 +44,16 @@ variable "delegations" {
   default     = []
 }
 
+variable "nsg_association_enabled" {
+  type        = bool
+  description = "Boolean flag that determines if NSG association would be created"
+  default     = false
+}
+
 variable "nsg_id" {
-  type        = map(string)
+  type        = string
   description = "The ID of the Network Security Group which should be associated with the Subnet"
-  default     = {}
+  default     = null
 }
 
 variable "export_subnet_id" {