Skip to content

Commit b5f0545

Browse files
Merge pull request openshift#7002 from mresvanis/add-confidential-gcp-bootstrap
gcp: add confidential compute support for boostrap TF
2 parents 65b5f13 + 20f925d commit b5f0545

File tree

1 file changed

+21
-0
lines changed

1 file changed

+21
-0
lines changed

data/data/gcp/bootstrap/main.tf

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,6 +113,27 @@ resource "google_compute_instance" "bootstrap" {
113113
network_ip = local.public_endpoints ? null : google_compute_address.bootstrap.address
114114
}
115115

116+
dynamic "shielded_instance_config" {
117+
for_each = var.gcp_master_secure_boot != "" ? [1] : []
118+
content {
119+
enable_secure_boot = var.gcp_master_secure_boot == "Enabled"
120+
}
121+
}
122+
123+
dynamic "confidential_instance_config" {
124+
for_each = var.gcp_master_confidential_compute != "" ? [1] : []
125+
content {
126+
enable_confidential_compute = var.gcp_master_confidential_compute == "Enabled"
127+
}
128+
}
129+
130+
dynamic "scheduling" {
131+
for_each = var.gcp_master_on_host_maintenance != "" ? [1] : []
132+
content {
133+
on_host_maintenance = var.gcp_master_on_host_maintenance
134+
}
135+
}
136+
116137
metadata = {
117138
user-data = data.ignition_config.redirect.rendered
118139
}

0 commit comments

Comments
 (0)