Skip to content

Add support for disk_encryption_set_id#195

Merged
lonegunmanb merged 3 commits intoAzure:masterfrom
lonegunmanb:e-disk-encryption-set
Jul 13, 2022
Merged

Add support for disk_encryption_set_id#195
lonegunmanb merged 3 commits intoAzure:masterfrom
lonegunmanb:e-disk-encryption-set

Conversation

@lonegunmanb
Copy link
Copy Markdown
Member

@lonegunmanb lonegunmanb commented Jun 21, 2022

This patch add support for disk_encryption_set_id to harden the cluster's security and solve #194 . We've used Checkov and Tflint to scan the test code and ignore one issue by comment. This patch should partially solve #183.

@lonegunmanb lonegunmanb requested a review from zioproto June 21, 2022 11:05
@lonegunmanb lonegunmanb force-pushed the e-disk-encryption-set branch 2 times, most recently from 92ea27f to b0a55d5 Compare June 23, 2022 08:27
@lonegunmanb lonegunmanb force-pushed the e-disk-encryption-set branch 4 times, most recently from c6fe6db to c699f06 Compare July 11, 2022 10:24
Comment thread test/fixture/providers.tf Outdated
}
curl = {
source = "anschoewe/curl"
version = "1.0.2"
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shall we be more flexible on version here?

Comment thread test/fixture/disk_encryption_set.tf Outdated

resource "azurerm_key_vault" "des_vault" {
name = "${random_string.key_vault_prefix.result}-des-keyvault"
location = azurerm_resource_group.main.location
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Indent here.

@lonegunmanb
Copy link
Copy Markdown
Member Author

Thanks @jiaweitao001 , would please give this pr another review? Thanks.

Copy link
Copy Markdown
Collaborator

@jiaweitao001 jiaweitao001 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. Thanks!

…ster's security and solve Azure#194 . This patch should partially solve Azure#183.
Make version restriction more flexible.
@lonegunmanb lonegunmanb force-pushed the e-disk-encryption-set branch from 7872125 to 4eb06d5 Compare July 13, 2022 00:36
@lonegunmanb lonegunmanb merged commit d79c2d3 into Azure:master Jul 13, 2022
@lonegunmanb lonegunmanb deleted the e-disk-encryption-set branch November 21, 2023 08:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants