fiw when no bastion is specified

Azure · Mar 29, 2024 · 7567a04 · 7567a04
1 parent f8e5a65
commit 7567a04
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tf/network_security_group.tf b/tf/network_security_group.tf
@@ -108,7 +108,7 @@ resource "azurerm_subnet_network_security_group_association" "netapp" {
 }
 
 resource "azurerm_subnet_network_security_group_association" "bastion" {
-  count                     = local.create_nsg ? 1 : 0
+  count                     = local.create_nsg ? (local.no_bastion_subnet ? 0 : 1) : 0
   subnet_id                 = local.create_bastion_subnet ? azurerm_subnet.bastion[0].id : data.azurerm_subnet.bastion[0].id
   network_security_group_id = azurerm_network_security_group.common[0].id
 }