Support EncryptionAtHost using disk encryption sets (#73)

Signed-off-by: David J. M. Karlsen <[email protected]> Co-authored-by: David J. M. Karlsen <[email protected]>
rh-mobb · Oct 5, 2023 · cc66bb5 · cc66bb5
1 parent 530bd34
commit cc66bb5
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/charts/aro-machinesets/Chart.yaml b/charts/aro-machinesets/Chart.yaml
@@ -3,7 +3,7 @@ name: aro-machinesets
 description: A Helm chart to configure machinesets for ARO
 type: application
 
-version: 0.3.0
+version: 0.4.0
 maintainers:
   - name: paulczar
 home: https://github.com/rh-mobb/helm-charts
diff --git a/charts/aro-machinesets/templates/machineset.yaml b/charts/aro-machinesets/templates/machineset.yaml
@@ -63,6 +63,10 @@ spec:
           userDataSecret:
             name: worker-user-data
           vmSize: {{ $.Values.vmSize }}
+          {{- if $machineSetSpec.osDisk.managedDisk.diskEncryptionSet }}
+          securityProfile:
+            encryptionAtHost: true
+          {{- end }}
           {{- if $.Values.enableSpot }}
           spotVMOptions: {{ $machineSetSpec.spotVMOptions | default dict | toYaml | nindent 12 }}
           {{- end }}