diff --git a/modules/bigtable-instance/README.md b/modules/bigtable-instance/README.md index 05dcbdde..42ad0975 100644 --- a/modules/bigtable-instance/README.md +++ b/modules/bigtable-instance/README.md @@ -230,15 +230,16 @@ module "bigtable-instance" { | name | description | type | required | default | |---|---|:---:|:---:|:---:| | [clusters](variables.tf#L17) | Clusters to be created in the BigTable instance. Set more than one cluster to enable replication. If you set autoscaling, num_nodes will be ignored. | map(object({…})) | ✓ | | -| [name](variables.tf#L81) | The name of the Cloud Bigtable instance. | string | ✓ | | -| [project_id](variables.tf#L86) | Id of the project where datasets will be created. | string | ✓ | | +| [name](variables.tf#L87) | The name of the Cloud Bigtable instance. | string | ✓ | | +| [project_id](variables.tf#L92) | Id of the project where datasets will be created. | string | ✓ | | | [default_autoscaling](variables.tf#L33) | Default settings for autoscaling of clusters. This will be the default autoscaling for any cluster not specifying any autoscaling details. | object({…}) | | null | | [default_gc_policy](variables.tf#L44) | Default garbage collection policy, to be applied to all column families and all tables. Can be override in the tables variable for specific column families. | object({…}) | | null | | [deletion_protection](variables.tf#L56) | Whether or not to allow Terraform to destroy the instance. Unless this field is set to false in Terraform state, a terraform destroy or terraform apply that would delete the instance will fail. | bool | | true | | [display_name](variables.tf#L63) | The human-readable display name of the Bigtable instance. | string | | null | -| [iam](variables.tf#L69) | IAM bindings for topic in {ROLE => [MEMBERS]} format. | map(list(string)) | | {} | -| [labels](variables.tf#L75) | Labels to be attached to the instance. | map(string) | | {} | -| [tables](variables.tf#L91) | Tables to be created in the BigTable instance. | map(object({…})) | | {} | +| [encryption_key](variables.tf#L69) | The KMS key id to used for encryption of the Bigtable instance. | string | | null | +| [iam](variables.tf#L75) | IAM bindings for topic in {ROLE => [MEMBERS]} format. | map(list(string)) | | {} | +| [labels](variables.tf#L81) | Labels to be attached to the instance. | map(string) | | {} | +| [tables](variables.tf#L97) | Tables to be created in the BigTable instance. | map(object({…})) | | {} | ## Outputs diff --git a/modules/bigtable-instance/main.tf b/modules/bigtable-instance/main.tf index 309bbb1a..3aafaf26 100644 --- a/modules/bigtable-instance/main.tf +++ b/modules/bigtable-instance/main.tf @@ -49,6 +49,7 @@ resource "google_bigtable_instance" "default" { zone = cluster.value.zone storage_type = cluster.value.storage_type num_nodes = cluster.value.num_nodes + kms_key_name = var.encryption_key dynamic "autoscaling_config" { for_each = cluster.value.autoscaling == null ? [] : [""] diff --git a/modules/bigtable-instance/variables.tf b/modules/bigtable-instance/variables.tf index 132d5c2c..ca1fbb0e 100644 --- a/modules/bigtable-instance/variables.tf +++ b/modules/bigtable-instance/variables.tf @@ -66,6 +66,12 @@ variable "display_name" { default = null } +variable "encryption_key" { + description = "The KMS key id to used for encryption of the Bigtable instance." + type = string + default = null +} + variable "iam" { description = "IAM bindings for topic in {ROLE => [MEMBERS]} format." type = map(list(string))