Skip to content

Commit 4b1d365

Browse files
Tweaked behviour for how default encryption key is setup
1 parent ae9ef2a commit 4b1d365

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed

drivers/amazonec2/amazonec2.go

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -127,7 +127,7 @@ type Driver struct {
127127
UserDataFile string
128128
EncryptEbsVolume bool
129129
spotInstanceRequestId string
130-
KmsKeyId string
130+
kmsKeyId *string
131131
}
132132

133133
type clientFactory interface {
@@ -302,7 +302,6 @@ func (d *Driver) GetCreateFlags() []mcnflag.Flag {
302302
mcnflag.StringFlag{
303303
Name: "amazonec2-kms-key",
304304
Usage: "Custom KMS key using the AWS Managed CMK",
305-
Value: "alias/aws/ebs",
306305
EnvVar: "AWS_KMS_KEY",
307306
},
308307
}
@@ -403,7 +402,11 @@ func (d *Driver) SetConfigFromFlags(flags drivers.DriverOptions) error {
403402
d.OpenPorts = flags.StringSlice("amazonec2-open-port")
404403
d.UserDataFile = flags.String("amazonec2-userdata")
405404
d.EncryptEbsVolume = flags.Bool("amazonec2-encrypt-ebs-volume")
406-
d.KmsKeyId = flags.String("amazonec2-kms-key")
405+
406+
kmskeyid := flags.String("amazonec2-kms-key")
407+
if kmskeyid != "" {
408+
d.kmsKeyId = aws.String(kmskeyid)
409+
}
407410

408411
d.DisableSSL = flags.Bool("amazonec2-insecure-transport")
409412

@@ -613,7 +616,7 @@ func (d *Driver) innerCreate() error {
613616
VolumeType: aws.String(d.VolumeType),
614617
DeleteOnTermination: aws.Bool(true),
615618
Encrypted: aws.Bool(d.EncryptEbsVolume),
616-
KmsKeyId: aws.String(d.KmsKeyId),
619+
KmsKeyId: d.kmsKeyId,
617620
},
618621
}
619622
netSpecs := []*ec2.InstanceNetworkInterfaceSpecification{{

0 commit comments

Comments
 (0)