container-vm: expose ports

Signed-off-by: Jason Hall <jason@chainguard.dev>

container-vm/cloud-init.yaml.tftpl

@@ -48,6 +48,9 @@ write_files:
         --log-opt labels=container_name \
         --label container_name=${name} \
 %{ endif ~}
+%{ for port in container.ports ~}
+        -p ${port} \
+%{ endfor ~}
 %{ for e in container.env ~}
         -e ${e.name}="${e.value}" \
 %{ endfor ~}

container-vm/variables.tf

@@ -24,6 +24,7 @@ variable "containers" {
       name  = string
       value = string
     })), [])
+    ports          = optional(list(string), [])
     restart_policy = optional(string, "always")
   }))