update metadata_options (#436)

opszero · Dec 13, 2024 · d432cd9 · d432cd9
1 parent 0e84758
commit d432cd9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/examples/eks/main.tf b/examples/eks/main.tf
@@ -72,6 +72,7 @@ module "opszero-eks" {
       nodes_max_size         = 3,
       nodes_min_size         = 3
       ami_type               = "CUSTOM"
+      node_disk_encrypted    = true
     },
     "t3a-medium-spot2" = {
       instance_types = [
@@ -82,6 +83,7 @@ module "opszero-eks" {
       node_desired_capacity  = 1,
       nodes_max_size         = 1,
       nodes_min_size         = 1
+      node_disk_encrypted    = true
     }
   }
 

diff --git a/node_groups.tf b/node_groups.tf
@@ -26,15 +26,16 @@ module "eks_mng_bottlerocket_custom_ami" {
 }
 
 resource "aws_launch_template" "encrypted_launch_template" {
-  for_each = var.node_groups != null ? { for k, v in var.node_groups : k => v if lookup(v, "node_disk_encrypted", false) == true } : {}
+  for_each = { for k, v in var.node_groups : k => v if lookup(v, "node_disk_encrypted", false) }
 
   name_prefix = "${var.environment_name}-${each.key}"
   image_id    = data.aws_ssm_parameter.bottlerocket_ami.value
   user_data   = module.eks_mng_bottlerocket_custom_ami.user_data
 
   metadata_options {
-    http_endpoint = "enabled"
-    http_tokens   = "required"
+    http_endpoint               = "enabled"
+    http_tokens                 = "required"
+    http_put_response_hop_limit = 5
   }
 
   monitoring {