Skip to content

feat: Add support for deletion protection functionality in the cluster #3475

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

tiagovmvieira
Copy link

@tiagovmvieira tiagovmvieira commented Aug 9, 2025

Description

This PR adds support for EKS cluster deletion protection configuration through a new enable_deletion_protection variable. This feature allows users to enable AWS's built-in deletion protection safeguard for EKS clusters, helping prevent accidental or unauthorized deletion of critical infrastructure.

The variable defaults to false to maintain backward compatibility with existing module usage.

Motivation and Context

EKS cluster deletion protection is already a supported feature in AWS, providing a valuable security safeguard that helps prevent accidental deletion of critical Kubernetes infrastructure. This enhancement addresses user requests for better operational safety and aligns with AWS security best practices.

Dependency: This PR requires the AWS Terraform provider to support managing EKS deletion protection through Terraform. While AWS already supports this functionality natively, the Terraform provider implementation is pending in the following PR. This module enhancement will be ready to use once that provider update is released.

Breaking Changes

None. This is a backward-compatible addition. The new enable_deletion_protection variable defaults to false, preserving existing behavior for current module users.

How Has This Been Tested?

  • I have updated at least one of the examples/* to demonstrate and validate my change(s)
  • I have tested and validated these changes using one or more of the provided examples/* projects
  • I have executed pre-commit run -a on my pull request

@tiagovmvieira
Copy link
Author

pre-commit hook is failing in the tflint stage, cause this argument is not supported yet

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants