[EKS] Support for Managed nodes AMI encryption

[mbig]

Can the EKS managed node AMI be encrypted? Is there a plan for this to be supported down the road?

[mgarber-ops]

FYI @mbig much like you pointed out the service doesn't formally offer encryption on the nodes however you can enable the following as a workaround which will cover encryption of the root volumes:

https://docs.aws.amazon.com/cli/latest/reference/ec2/enable-ebs-encryption-by-default.html

note however that this is an account-wide setting so if it'll take effect for all ebs backed resources.

[mikestef9]

Closing as this feature request is addressed by launch template support. See #585 for details!