From 9195f0fee88a1a58880a5cb768c76acc15c3ee33 Mon Sep 17 00:00:00 2001 From: Daniel Patriche Date: Tue, 12 May 2020 19:12:49 +0300 Subject: [PATCH] feat: Add boot disk kms key variable (#516) Co-authored-by: Daniel Patriche --- autogen/main/cluster.tf.tmpl | 2 ++ modules/beta-private-cluster-update-variant/cluster.tf | 2 ++ modules/beta-private-cluster/cluster.tf | 2 ++ modules/beta-public-cluster/cluster.tf | 2 ++ 4 files changed, 8 insertions(+) diff --git a/autogen/main/cluster.tf.tmpl b/autogen/main/cluster.tf.tmpl index 73c05dfa6..bb0730c36 100644 --- a/autogen/main/cluster.tf.tmpl +++ b/autogen/main/cluster.tf.tmpl @@ -496,6 +496,8 @@ resource "google_container_node_pool" "pools" { sandbox_type = sandbox_config.value } } + + boot_disk_kms_key = lookup(each.value, "boot_disk_kms_key", "") {% endif %} shielded_instance_config { diff --git a/modules/beta-private-cluster-update-variant/cluster.tf b/modules/beta-private-cluster-update-variant/cluster.tf index eb32e53f6..c7c99ca60 100644 --- a/modules/beta-private-cluster-update-variant/cluster.tf +++ b/modules/beta-private-cluster-update-variant/cluster.tf @@ -452,6 +452,8 @@ resource "google_container_node_pool" "pools" { } } + boot_disk_kms_key = lookup(each.value, "boot_disk_kms_key", "") + shielded_instance_config { enable_secure_boot = lookup(each.value, "enable_secure_boot", false) enable_integrity_monitoring = lookup(each.value, "enable_integrity_monitoring", true) diff --git a/modules/beta-private-cluster/cluster.tf b/modules/beta-private-cluster/cluster.tf index 247666604..953cbd920 100644 --- a/modules/beta-private-cluster/cluster.tf +++ b/modules/beta-private-cluster/cluster.tf @@ -380,6 +380,8 @@ resource "google_container_node_pool" "pools" { } } + boot_disk_kms_key = lookup(each.value, "boot_disk_kms_key", "") + shielded_instance_config { enable_secure_boot = lookup(each.value, "enable_secure_boot", false) enable_integrity_monitoring = lookup(each.value, "enable_integrity_monitoring", true) diff --git a/modules/beta-public-cluster/cluster.tf b/modules/beta-public-cluster/cluster.tf index 4e47f879e..89c1d8054 100644 --- a/modules/beta-public-cluster/cluster.tf +++ b/modules/beta-public-cluster/cluster.tf @@ -367,6 +367,8 @@ resource "google_container_node_pool" "pools" { } } + boot_disk_kms_key = lookup(each.value, "boot_disk_kms_key", "") + shielded_instance_config { enable_secure_boot = lookup(each.value, "enable_secure_boot", false) enable_integrity_monitoring = lookup(each.value, "enable_integrity_monitoring", true)