Fly Volume Encrypted Option Not Reflected

[stepbrobd]

Please see following:

Volume:

resource "fly_volume" "volume" {
  app        = var.config["proejct_name"]
  name       = replace(format("%s-volume", var.config["proejct_name"]), "-", "_")
  region     = var.config["region"]
  size       = tonumber(var.config["disk_size"])
  depends_on = [fly_app.app]
}

Machine:

resource "fly_machine" "machine" {
...
  mounts = [{
    encrypted = true
    path      = "/data"
    volume    = fly_volume.volume.name
  }]
...
}

Resulted in:

=> fly volumes list 
ID          STATE   NAME            SIZE    REGION  ZONE    ENCRYPTED       ATTACHED VM     CREATED AT    
<vol id>    created <volume name>   5GB     sjc     91af    false           <vm id>         9 minutes ago

It seems like the encrypted option shouldn't be in the mounts block inside fly_machine resource, it should be a part of fly_volume resource.

[DAlperin]

Yeah that makes sense. I'll fix in next release.

[OJFord]

Aside from not working, it also means a permanent diff in terraform plan if it's set to true - since it will always see false on refresh.