From 015ee74e2f920a1900c5d99cd3148a090859bbc3 Mon Sep 17 00:00:00 2001
From: Marcus Sorensen <marcus_sorensen@apple.com>
Date: Wed, 28 Sep 2022 12:00:32 -0600
Subject: [PATCH] Refuse to change service offering if encryption value would
 change (#203)

---
 server/src/main/java/com/cloud/vm/UserVmManagerImpl.java | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/server/src/main/java/com/cloud/vm/UserVmManagerImpl.java b/server/src/main/java/com/cloud/vm/UserVmManagerImpl.java
index 873fed79693..58e1d7194a9 100644
--- a/server/src/main/java/com/cloud/vm/UserVmManagerImpl.java
+++ b/server/src/main/java/com/cloud/vm/UserVmManagerImpl.java
@@ -1260,6 +1260,10 @@ public class UserVmManagerImpl extends ManagerBase implements UserVmManager, Vir
         int currentCpu = currentServiceOffering.getCpu();
         int currentMemory = currentServiceOffering.getRamSize();
 
+        if (currentServiceOffering.getEncrypt() != newServiceOffering.getEncrypt()) {
+            throw new UnsupportedOperationException(("Cannot change volume encryption type via offering change"));
+        }
+
         Account owner = _accountMgr.getActiveAccountById(vmInstance.getAccountId());
         if (! VirtualMachineManager.ResourceCountRunningVMsonly.value()) {
             if (newCpu > currentCpu) {