allow to bring existing VPC as parameters, enable flag as a way to di…

…sable the hardening
databricks · Oct 15, 2024 · 7e7daa7 · 7e7daa7
1 parent 0a1d0ae
commit 7e7daa7
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/gcp/modules/workspace_deployment/cmek.tf b/gcp/modules/workspace_deployment/cmek.tf
@@ -20,16 +20,17 @@ resource "google_kms_crypto_key" "databricks_key" {
 
 
 
-
 # # assign CMEK on Databricks side
 resource "databricks_mws_customer_managed_keys" "this" {
+
         provider = databricks.accounts
         account_id   = var.databricks_account_id
         gcp_key_info {
-            kms_key_id   = google_kms_crypto_key.databricks_key[0].id 
+            kms_key_id   = var.use_existing_cmek? "projects/${var.google_project}/locations/${var.google_region}/keyRings/${var.keyring_name}/cryptoKeys/${var.key_name}": google_kms_crypto_key.databricks_key[0].id
         }
         use_cases = ["STORAGE","MANAGED","MANAGED_SERVICES"]
         lifecycle {
               ignore_changes = all
         }
-}
+}
+