Add encrypted option for root block device and add ebs specifications #161
Conversation
|
Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement Learn more about why HashiCorp requires a CLA and what the CLA includes sylvain zaki seems not to be a GitHub user. Have you signed the CLA already but the status is still pending? Recheck it. |
| volume_type = var.ebs_volume_type | ||
| delete_on_termination = var.ebs_volume_delete_on_termination | ||
| encrypted = var.ebs_volume_encrypted | ||
| } |
There was a problem hiding this comment.
We should not always add an EBS block device. Instead, add a new ebs_block_devices input variable, which contains a list of objects, and use that as the value with for_each. The default will be an empty list to maintain backwards compatibility, but now you can override the list to add one or more EBS volumes.
The goal is to have encrypted root block device and ebs encrypted block device.