-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add beta support for confidential_nodes #1040
Add beta support for confidential_nodes #1040
Conversation
This comment has been minimized.
This comment has been minimized.
dynamic "confidential_nodes" { | ||
for_each = local.confidential_node_config | ||
content { | ||
enabled = confidential_nodes.value.enabled |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
For future reference, it's usually more intuitive to just hard-code this (enabled = true
).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I thought this would be more aligned with existing code like
enabled = network_policy.value.enabled |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, that's an anti-pattern though.
autogen/main/variables.tf.tmpl
Outdated
@@ -614,6 +614,12 @@ variable "shadow_firewall_rules_priority" { | |||
} | |||
|
|||
{% if beta_cluster %} | |||
variable "enable_confidential_node" { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
variable "enable_confidential_node" { | |
variable "enable_confidential_nodes" { |
@@ -0,0 +1,72 @@ | |||
/** |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for adding a test! However, we're trying to avoid too many examples. Could you instead consolidate this by adding confidential notes to one of the existing examples/tests?
@@ -64,6 +64,8 @@ module "gke" { | |||
}, | |||
] | |||
|
|||
enable_confidential_node = true |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This isn't correct.
…es#1040) * Add beta support for confidential_nodes * Cannot use a null value in for_each * Add example and test * Add example and test * Update test name * Review Comments * Review Comments * Review Comments Co-authored-by: Stenal P Jolly <[email protected]>
Reference: #737