Enable AWS root block device encryption by default

* terraform-provider-aws v2.23.0 allows AWS root block devices
to enable encryption by default.
* Require updating terraform-provider-aws to v2.23.0 or higher
* Enable root EBS device encryption by default for controller
instances and worker instances in auto-scaling groups

For comparison:

* Google Cloud persistent disks have been encrypted by
default for years
* Azure managed disk encryption is not ready yet (#486)
This commit is contained in:
Dalton Hubble
2019-08-07 20:56:55 -07:00
parent cad12804c8
commit 6db11d5908
7 changed files with 11 additions and 2 deletions

View File

@ -4,6 +4,11 @@ Notable changes between versions.
## Latest
#### AWS
* Enable root block device encryption by default ([#527](https://github.com/poseidon/typhoon/pull/527))
* Require `terraform-provider-aws` v2.23+ (**action required**)
#### Addons
* Update kube-state-metrics from v1.7.1 to v1.7.2