Skip to content
This repository was archived by the owner on Jan 25, 2023. It is now read-only.
Prev Previous commit
Next Next commit
Fix default vaule and explain the choices
  • Loading branch information
efx-jjohnson committed Oct 4, 2018
commit cbd44e21a4dba3323f5e51ecd1f52732622ade8f
7 changes: 6 additions & 1 deletion modules/vault-cluster/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -201,8 +201,13 @@ variable "force_destroy_s3_bucket" {
# Launch Template Extensions

variable "asg_launch_mechanism" {
# Choices are launch_configuration and launch_template.
# launch_template gives you the opportunithy to declare volume encryption and
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You can enable volume encryption with a launch config too: https://www.terraform.io/docs/providers/aws/r/launch_configuration.html#encrypted

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Indeed it can. Comment updated.
(FWIW, that ability isn't currently exposed in this module)

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We probably should expose the ability to encrypt EBS volumes in the module for both launch configs and launch templates...

# set tags on instance volumes.
#
description = "Select between launch_config-driven or launch_template-driven autoscaling group."
default = "launch_config"

default = "launch_configuration"
}

variable "launch_template_tags" {
Expand Down