Ability to not create EIP IP for secondary IP VIP

[JeffGiroux]

User for the Cloud Failover Extension (CFE) use case wants to deploy two BIG-IP instances, but only have one of the instances get created with an associated public IP address for the secondary IP...the VIP. Why? CFE will only map one public IP to the private IP listener address.

The current bigip module has an option for public_ip but that applies to all interfaces and their public IPs. What I want is a new parameter flag associated with something like "create secondary VIP public IP" or suggested by F5 PD would be "cfe_secondary_vip_disable" new parameter. If true, then the BIG-IP creates public IPs for mgmt and external primary IP but NOT for the external secondary IP on the NIC.

Example...

default value cfe_secondary_vip_disable=false

# Create F5 BIG-IP VMs
module "bigip" {
  source                     = "F5Networks/bigip-module/aws"
  mgmt_subnet_ids            = [{ "subnet_id" = var.mgmtSubnetAz1, "public_ip" = true, "private_ip_primary" = "" }]
  mgmt_securitygroup_ids     = [var.mgmtNsg]
  external_subnet_ids        = [{ "subnet_id" = var.extSubnetAz1, "public_ip" = true, "private_ip_primary" = "", "private_ip_secondary" = "" }]
  external_securitygroup_ids = [var.extNsg]
  internal_subnet_ids        = [{ "subnet_id" = var.intSubnetAz1, "public_ip" = false, "private_ip_primary" = "", "private_ip_secondary" = "" }]
  internal_securitygroup_ids = [var.intNsg]
}

module "bigip2" {
  source                     = "F5Networks/bigip-module/aws"
  mgmt_subnet_ids            = [{ "subnet_id" = var.mgmtSubnetAz2, "public_ip" = true, "private_ip_primary" = "" }]
  mgmt_securitygroup_ids     = [var.mgmtNsg]
  external_subnet_ids        = [{ "subnet_id" = var.extSubnetAz2, "public_ip" = true, "private_ip_primary" = "", "private_ip_secondary" = "" }]
  external_securitygroup_ids = [var.extNsg]
  internal_subnet_ids        = [{ "subnet_id" = var.intSubnetAz2, "public_ip" = false, "private_ip_primary" = "", "private_ip_secondary" = "" }]
  internal_securitygroup_ids = [var.intNsg]
  cfe_secondary_vip_disable  = true
}