https://issues.redhat.com/browse/CORS-3217 covers the upstream chagnes to CAPG needed to add disk encrytion. In addition changes will be needed in the installer to set the GCPMachine disk encryption based on the machinepool settings.

Notes on the required changes are at https://docs.google.com/document/d/1kVgqeCcPOrq4wI5YgcTZKuGJo628dchjqCrIrVDS83w/edit?usp=sharing

Once the upstream changes from CORS-3217 have been accepted:

• plumb through existing encryption key fields
• vendor updated CAPG
• update infrastructure-components.yaml (CRD definitions) if necessary
•