Hi all, I am trying to add EC2 root volume encryption for EKS nodes created by eks.ManagedNodeGroup. The below does not work. Perhaps someone here knows the trick? https://www.pulumi.com/registry/packages/eks/api-doc Thanks for your help.

cluster:eks.Cluster = eks.Cluster(f"{cluster_name}-cluster",
        name=cluster_name,
        ....
        node_group_options=eks.ClusterNodeGroupOptionsArgs(
            cloud_formation_tags={
                "Name": "EKS Worker Node"
            },
            encrypt_root_block_device=True,
        ),
        ...
    )   

    eks.ManagedNodeGroup(f"{cluster_name}-node-group-" + str(i),
            cluster=cluster.core,
            node_group_name=f"{cluster_name}-managed-node-group-" + str(i),
            ....
        ))