Documentation/example covering how to encrypt boot volume on ibm_is_instance

[seansund]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

I'm struggling to provision an ibm_is_instance with an encrypted boot volume. The documentation for boot_volume.encryption field of the ibm_is_instance resource states "The type of encryption to use for the boot volume" which is not at all helpful. The documentation for boot_volume.encryption in ibm_is_instance_template reads "The encryption key CRN to encrypt the boot volume attached" which is getting a little better although I'm not sure it applies here.

Based on the documentation from ibm_is_instance_template I tried passing the CRN of the key from the KMS instance and got Error: The CRN specified in the request is not valid.. (Also created a Reader Authorization between all subtypes of IS to my Hyper Protect KMS.)

New or Affected Resource(s)

• ibm_is_instance

Potential Terraform Configuration

References

• #0000