Add disk encyption key to the google_compute_instance_template - Sove…

…reign support (#2750) * add disk encyption key to the google_compute_instance_template * add a condition to the kms_key_self_link * use dynamic variable for disk_encryption_key * remove the getpip from the repo --------- Co-authored-by: Julio Castillo <[email protected]> Co-authored-by: Ludovico Magnocavallo <[email protected]>
GoogleCloudPlatform · Dec 9, 2024 · 2defaed · 2defaed
1 parent 3f86056
commit 2defaed
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/modules/compute-vm/main.tf b/modules/compute-vm/main.tf
@@ -376,6 +376,13 @@ resource "google_compute_instance_template" "default" {
     disk_type             = var.boot_disk.initialize_params.type
     resource_manager_tags = var.tag_bindings
     source_image          = var.boot_disk.initialize_params.image
+
+    dynamic "disk_encryption_key" {
+      for_each = var.encryption != null ? [""] : []
+      content {
+        kms_key_self_link = var.encryption.kms_key_self_link
+      }
+    }
   }
 
   dynamic "confidential_instance_config" {