add hc port of hc checked backends to hc-firewall

Signed-off-by: Naseem <naseem@transit.app>
terraform-google-modules · Nov 24, 2020 · 5a1838e · 5a1838e
1 parent 73f200b
commit 5a1838e
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/autogen/main.tf.tmpl b/autogen/main.tf.tmpl
@@ -267,10 +267,10 @@ resource "google_compute_firewall" "default-hc" {
   target_service_accounts = length(var.target_service_accounts) > 0 ? var.target_service_accounts : null
 
   dynamic "allow" {
-    for_each = var.backends
+    for_each = local.health_checked_backends
     content {
       protocol = "tcp"
-      ports    = [allow.value.port]
+      ports    = [lookup(allow.value["health_check"], "port", null)]
     }
   }
 }

diff --git a/main.tf b/main.tf
@@ -246,10 +246,10 @@ resource "google_compute_firewall" "default-hc" {
   target_service_accounts = length(var.target_service_accounts) > 0 ? var.target_service_accounts : null
 
   dynamic "allow" {
-    for_each = var.backends
+    for_each = local.health_checked_backends
     content {
       protocol = "tcp"
-      ports    = [allow.value.port]
+      ports    = [lookup(allow.value["health_check"], "port", null)]
     }
   }
 }
diff --git a/modules/dynamic_backends/main.tf b/modules/dynamic_backends/main.tf
@@ -249,10 +249,10 @@ resource "google_compute_firewall" "default-hc" {
   target_service_accounts = length(var.target_service_accounts) > 0 ? var.target_service_accounts : null
 
   dynamic "allow" {
-    for_each = var.backends
+    for_each = local.health_checked_backends
     content {
       protocol = "tcp"
-      ports    = [allow.value.port]
+      ports    = [lookup(allow.value["health_check"], "port", null)]
     }
   }
 }