skip worker ingress security group rule when theres no worker securit…

…y group
calm · Jun 25, 2021 · e0fc15e · e0fc15e
1 parent 0befae3
commit e0fc15e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cluster.tf b/cluster.tf
@@ -77,7 +77,7 @@ resource "aws_security_group_rule" "cluster_egress_internet" {
 }
 
 resource "aws_security_group_rule" "cluster_https_worker_ingress" {
-  count                    = var.cluster_create_security_group && var.create_eks ? 1 : 0
+  count                    = var.cluster_create_security_group && var.create_eks && var.worker_create_security_group ? 1 : 0
   description              = "Allow pods to communicate with the EKS cluster API."
   protocol                 = "tcp"
   security_group_id        = local.cluster_security_group_id