From c7e5ec1cf8366b6c68c12e4896976c801c15fc4b Mon Sep 17 00:00:00 2001
From: Daniel Spangenberg <daniel.spangenberg@redhat.com>
Date: Tue, 12 Feb 2019 12:51:25 +0100
Subject: [PATCH] Add encrypted EBS volumes

---
 pkg/actuators/machine/instances.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkg/actuators/machine/instances.go b/pkg/actuators/machine/instances.go
index 087d3d57e7..b845f21485 100644
--- a/pkg/actuators/machine/instances.go
+++ b/pkg/actuators/machine/instances.go
@@ -198,11 +198,13 @@ func getBlockDeviceMappings(blockDeviceMappings []providerconfigv1.BlockDeviceMa
 	deviceName := describeAMIResult.Images[0].RootDeviceName
 
 	// Only support one blockDeviceMapping
+	encrypted := blockDeviceMappings[0].EBS.Encrypted
 	volumeSize := blockDeviceMappings[0].EBS.VolumeSize
 	volumeType := blockDeviceMappings[0].EBS.VolumeType
 	blockDeviceMapping := ec2.BlockDeviceMapping{
 		DeviceName: deviceName,
 		Ebs: &ec2.EbsBlockDevice{
+			Encrypted:  encrypted,
 			VolumeSize: volumeSize,
 			VolumeType: volumeType,
 		},