Merge pull request #22 from clouddrove/feat/enforcement

fix enforcement error
clouddrove · Jan 3, 2024 · 2796d26 · 2796d26
2 parents 17abb3c + e6e90d0
commit 2796d26
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/main.tf b/main.tf
@@ -32,8 +32,11 @@ resource "azurerm_virtual_network" "vnet" {
   bgp_community           = var.bgp_community
   edge_zone               = var.edge_zone
 
-  encryption {
-    enforcement = var.enforcement
+  dynamic "encryption" {
+    for_each = var.enforcement != null ? ["encryption"] : []
+    content {
+      enforcement = var.enforcement
+    }
   }
 
   dynamic "ddos_protection_plan" {

diff --git a/variables.tf b/variables.tf
@@ -102,7 +102,7 @@ variable "enable_network_watcher" {
 
 variable "enforcement" {
   type        = string
-  default     = "AllowUnencrypted"
+  default     = null
   description = "Specifies if the encrypted Virtual Network allows VM that does not support encryption. Possible values are DropUnencrypted and AllowUnencrypted."
 }