feat: add encryption_key_name to safer_mysql module (#185)

terraform-google-modules · Jan 27, 2021 · 487397c · 487397c
1 parent 9989892
commit 487397c
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 0 deletions.
diff --git a/modules/safer_mysql/README.md b/modules/safer_mysql/README.md
@@ -182,6 +182,7 @@ mysql -S $HOME/mysql_sockets/myproject:region:instance -u user -p
 | disk\_autoresize | Configuration to increase storage size | bool | `"true"` | no |
 | disk\_size | The disk size for the master instance | number | `"10"` | no |
 | disk\_type | The disk type for the master instance. | string | `"PD_SSD"` | no |
+| encryption\_key\_name | The full path to the encryption key used for the CMEK disk encryption | string | `"null"` | no |
 | maintenance\_window\_day | The day of week (1-7) for the master instance maintenance. | number | `"1"` | no |
 | maintenance\_window\_hour | The hour of day (0-23) maintenance window for the master instance maintenance. | number | `"23"` | no |
 | maintenance\_window\_update\_track | The update track of maintenance window for the master instance maintenance. Can be either `canary` or `stable`. | string | `"stable"` | no |

diff --git a/modules/safer_mysql/main.tf b/modules/safer_mysql/main.tf
@@ -34,6 +34,7 @@ module "safer_mysql" {
   maintenance_window_hour         = var.maintenance_window_hour
   maintenance_window_update_track = var.maintenance_window_update_track
   database_flags                  = var.database_flags
+  encryption_key_name             = var.encryption_key_name
 
   deletion_protection = var.deletion_protection
 

diff --git a/modules/safer_mysql/variables.tf b/modules/safer_mysql/variables.tf
@@ -273,3 +273,9 @@ variable "read_replica_deletion_protection" {
   type        = bool
   default     = false
 }
+
+variable "encryption_key_name" {
+  description = "The full path to the encryption key used for the CMEK disk encryption"
+  type        = string
+  default     = null
+}