From cc66bb5363be1a1e0cd4eccb3c5323946b44d8aa Mon Sep 17 00:00:00 2001 From: "David J. M. Karlsen" Date: Thu, 5 Oct 2023 16:03:19 +0200 Subject: [PATCH] Support EncryptionAtHost using disk encryption sets (#73) Signed-off-by: David J. M. Karlsen Co-authored-by: David J. M. Karlsen --- charts/aro-machinesets/Chart.yaml | 2 +- charts/aro-machinesets/templates/machineset.yaml | 4 ++++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/charts/aro-machinesets/Chart.yaml b/charts/aro-machinesets/Chart.yaml index e6585bc..fc7f914 100644 --- a/charts/aro-machinesets/Chart.yaml +++ b/charts/aro-machinesets/Chart.yaml @@ -3,7 +3,7 @@ name: aro-machinesets description: A Helm chart to configure machinesets for ARO type: application -version: 0.3.0 +version: 0.4.0 maintainers: - name: paulczar home: https://github.com/rh-mobb/helm-charts diff --git a/charts/aro-machinesets/templates/machineset.yaml b/charts/aro-machinesets/templates/machineset.yaml index 33e1259..1ec107e 100644 --- a/charts/aro-machinesets/templates/machineset.yaml +++ b/charts/aro-machinesets/templates/machineset.yaml @@ -63,6 +63,10 @@ spec: userDataSecret: name: worker-user-data vmSize: {{ $.Values.vmSize }} + {{- if $machineSetSpec.osDisk.managedDisk.diskEncryptionSet }} + securityProfile: + encryptionAtHost: true + {{- end }} {{- if $.Values.enableSpot }} spotVMOptions: {{ $machineSetSpec.spotVMOptions | default dict | toYaml | nindent 12 }} {{- end }}