Added explicit shielded nodes config

davinerd · Jul 5, 2021 · 8a96e10 · 8a96e10
1 parent de6fe67
commit 8a96e10
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/locals.tf b/locals.tf
@@ -47,6 +47,8 @@ locals {
       auto_upgrade       = var.node_auto_upgrade
       preemptible        = var.node_preemptible
       initial_node_count = var.initial_node_count
+      enable_secure_boot = var.enable_secure_boot
+      enable_integrity_monitoring = var.enable_integrity_monitoring
     }
 
   node_pools = [for k in var.node_pools: merge(local.default_node_pools, k)]

diff --git a/variables.tf b/variables.tf
@@ -396,4 +396,14 @@ variable "enable_pod_security_policy" {
 
 variable "http_public_ip_url" {
   default = "https://ifconfig.co/"
+}
+
+variable "enable_integrity_monitoring" {
+  type = bool
+  default = true
+}
+
+variable "enable_secure_boot" {
+  type = bool
+  default = true
 }