Enable protection for eks_cluster and managed node group

fpco · Jul 11, 2023 · 5063dc1 · 5063dc1
1 parent 0a17f65
commit 5063dc1
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -88,6 +88,10 @@ resource "aws_eks_cluster" "this" {
     aws_cloudwatch_log_group.this,
     aws_iam_policy.cni_ipv6_policy,
   ]
+
+  lifecycle {
+    prevent_destroy = true
+  }
 }
 
 resource "aws_ec2_tag" "cluster_primary_security_group" {

diff --git a/modules/eks-managed-node-group/main.tf b/modules/eks-managed-node-group/main.tf
@@ -382,6 +382,7 @@ resource "aws_eks_node_group" "this" {
     ignore_changes = [
       scaling_config[0].desired_size,
     ]
+    prevent_destroy = true
   }
 
   tags = merge(