Merge pull request #199 from mirkop-mattr/encrypted_vol

add option to allow encryption of root volume
hashicorp · Jan 7, 2021 · 2100cd9 · 2100cd9
2 parents 517657a + a490f31
commit 2100cd9
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/modules/consul-cluster/main.tf b/modules/consul-cluster/main.tf
@@ -95,6 +95,7 @@ resource "aws_launch_configuration" "launch_configuration" {
     volume_type           = var.root_volume_type
     volume_size           = var.root_volume_size
     delete_on_termination = var.root_volume_delete_on_termination
+    encrypted             = var.root_volume_encrypted
   }
 
   # Important note: whenever using a launch configuration with an auto scaling group, you must set

diff --git a/modules/consul-cluster/variables.tf b/modules/consul-cluster/variables.tf
@@ -164,6 +164,12 @@ variable "root_volume_delete_on_termination" {
   default     = true
 }
 
+variable "root_volume_encrypted" {
+  description = "Encrypt the root volume at rest"
+  type        = bool
+  default     = false
+}
+
 variable "wait_for_capacity_timeout" {
   description = "A maximum duration that Terraform should wait for ASG instances to be healthy before timing out. Setting this to '0' causes Terraform to skip all Capacity Waiting behavior."
   type        = string