machinedeployment-aws-ebs-encryption-enabled.yaml

apiVersion: "cluster.k8s.io/v1alpha1"
kind: MachineDeployment
metadata:
  name: << MACHINE_NAME >>
  namespace: kube-system
spec:
  replicas: 1
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
  selector:
    matchLabels:
      name: << MACHINE_NAME >>
  template:
    metadata:
      labels:
        name: << MACHINE_NAME >>
    spec:
      providerSpec:
        value:
          sshPublicKeys:
            - "<< YOUR_PUBLIC_KEY >>"
          cloudProvider: "aws"
          cloudProviderSpec:
            accessKeyId: << AWS_ACCESS_KEY_ID >>
            secretAccessKey: << AWS_SECRET_ACCESS_KEY >>
            region: "eu-central-1"
            availabilityZone: "eu-central-1a"
            vpcId: "vpc-819f62e9"
            instanceType: "t2.medium"
            instanceProfile: "kubernetes-v1"
            diskSize: 50
            diskType: "gp2"
            ebsVolumeEncrypted: true
            securityGroupIDs:
            - "sg-a2c195ca"
            tags:
            # you have to set this flag to real clusterID when running against our dev or prod
            # otherwise you might have issues with your nodes not joining the cluster
              "KubernetesCluster": "randomString"
            # Disabling the public IP assignment requires a private subnet with internet access.
            assignPublicIP: true
          # Can be 'ubuntu', 'coreos' or 'centos'
          operatingSystem: "<< OS_NAME >>"
          operatingSystemSpec:
            distUpgradeOnBoot: false
            disableAutoUpdate: true
      versions:
        kubelet: "<< KUBERNETES_VERSION >>"