Skip to content

AWS volume encrypted on creating new VM - TNZ-50715#720

Merged
huy-hn-nguyen merged 5 commits into
mainfrom
TNZ-50715
Feb 4, 2026
Merged

AWS volume encrypted on creating new VM - TNZ-50715#720
huy-hn-nguyen merged 5 commits into
mainfrom
TNZ-50715

Conversation

@huy-hn-nguyen

Copy link
Copy Markdown
Collaborator

OM command to support volume encryption when creating VM on AWS

Comment thread vmlifecycle/vmmanagers/aws.go Outdated
Comment thread vmlifecycle/vmmanagers/aws.go
@sanjimoh

Copy link
Copy Markdown
Contributor

@huy-hn-nguyen, couple of comments around the PR in general -

  • Could you add relevant test cases for the new encryption feature? I see these are currently missing from the PR.
  • How are we thinking around documenting these changes? For example - I see in Platform Automation Docs here, there are aws configs. Should we be adding encrypted & kms_key_id in this documentation.

Also

@yharish991-brcm

Copy link
Copy Markdown
Collaborator

How are we thinking around documenting these changes? For example - I see in Platform Automation Docs here, there are aws configs. Should we be adding encrypted & kms_key_id in this documentation.

Good catch regarding documentation, i don't think we are documenting the sub-commands in om cli repo, but i agree that we should update the PA docs with an volume encryption config example

@huy-hn-nguyen

Copy link
Copy Markdown
Collaborator Author

@sanjimoh I added the test cases for this PR. I also updated this file (https://github.com/pivotal/docs-platform-automation/blob/TNZ-50715/docs/examples/opsman-config/aws.yml) from docs-platform-automation. I will create the PR for this change as send out for review. I checked with Kathy about the KB as well. I am waiting for the response.

@yharish991-brcm

Copy link
Copy Markdown
Collaborator

@huy-hn-nguyen will you be adding the tests that we discussed yesterday in a subsequent pr? Can you also enable running the aws tests in CI?

@huy-hn-nguyen

Copy link
Copy Markdown
Collaborator Author

@huy-hn-nguyen will you be adding the tests that we discussed yesterday in a subsequent pr? Can you also enable running the aws tests in CI?

@yharish991-brcm Regarding to the test cases we discussed, I tried to get the information of the created VM. The returned result was "running", no other information provided (maybe because it was a simulated VM, not a real one from AWS). If not an urgent, I think we should postpone this test scenario until we update the returned result. I noticed that the test set, https://github.com/pivotal-cf/om/actions/runs/21601401642/job/62248040234, not only disabled AWS creating VM, but also disabled test cases for Azure, VSphere, and GCP as well. So, I am not enabled AWS tests until I find out the reason for this.

@sanjimoh

sanjimoh commented Feb 4, 2026

Copy link
Copy Markdown
Contributor

@sanjimoh I added the test cases for this PR. I also updated this file (https://github.com/pivotal/docs-platform-automation/blob/TNZ-50715/docs/examples/opsman-config/aws.yml) from docs-platform-automation. I will create the PR for this change as send out for review. I checked with Kathy about the KB as well. I am waiting for the response.

@huy-hn-nguyen: encrypted is optional & defaults to false. However, pl. consider adding a test case for when encrypted is completely omitted from config not just false. This validates backward compatibility - existing configs without the encrypted field should continue to work. Otherwise changes looks good to me.

@huy-hn-nguyen

Copy link
Copy Markdown
Collaborator Author

@sanjimoh I added the checking for Encrypted and KmsKeyId so that the tests will be executed even when encrypted and kms_key_id are omitted from config file. No new test case needed since the tests from line #79 of aws_test.go already covered this scenario.

@huy-hn-nguyen huy-hn-nguyen merged commit 277e6d5 into main Feb 4, 2026
1 check passed
@huy-hn-nguyen huy-hn-nguyen deleted the TNZ-50715 branch February 4, 2026 23:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants