terraform-example-foundation-app fix(deps)!: Update Terraform terraform-google-modules/kubernetes-engine/google to v36

This PR contains the following updates:

Package	Type	Update	Change
terraform-google-modules/kubernetes-engine/google (source)	module	major	`~> 14.0.1` -> `~> 36.3.0`
terraform-google-modules/kubernetes-engine/google (source)	module	major	`~> 14.1` -> `~> 36.0`

Release Notes

terraform-google-modules/terraform-google-kubernetes-engine (terraform-google-modules/kubernetes-engine/google)

`v36.3.0`

Compare Source

Features

support parallelstore csi driver (#2203) (ab9d4cb)
support total_egress_bandwidth_tier (#2207) (2bd9cbd)

`v36.2.0`

Compare Source

Features

add dns_allow_external_traffic (#2313) (9124dbe)
add hyperdisk confidential node pool to the confidential safer cluster example (#2311) (260be87)
cgroup: add support for configuring Linux cgroup mode in autopilot clusters (#2282) (5069034)
safer-cluster: add support for observability_metrics and _relay (#2291) (3cd930c)

Bug Fixes

Update files with correct values for enterprise config (#2314) (cf4cee7)

`v36.1.0`

Compare Source

Features

add confidential nodes example (#2227) (2ae739b)
add enterprise config (#2298) (adaabbf)
add node_affinity (#2295) (0e7a249)
Add possibility to setup private nodes pool if global configuration is different (#2290) (aadc860)
Make autoscaling resource limits optional (#2301) (99fc4ce)
workload_identity - add image pull secrets (#2276) (8d5c9a4)

Bug Fixes

network_config with just enable_private_nodes (#2292) (d49c3bf)

`v36.0.2`

Compare Source

Bug Fixes

deps: Update Terraform terraform-google-modules/kubernetes-engine/google to v36 (#2269) (c3e1a8d)

`v36.0.1`

Compare Source

Bug Fixes

grant_registry_access gate serviceUsageConsumer (#2266) (69eca65)

`v36.0.0`

Compare Source

⚠ BREAKING CHANGES

remove ACM sub-module (#2236)
remove ASM sub-module (#2168)
re-align node_config_defaults to cluster types (#2256)
TPG>=6.14: promote enable_fqdn_network_policy to GA (#2225)

Features

add serviceUsageConsumer to SA for GCFS (#2262) (bb7ec93)
Add support for CMEK in Autopilot GKE module (#2230) (1c08b99)
add support for custom monitoring metrics writer role (#2239) (4aad5e9)
autopilot: add insecure_kubelet_readonly_port_enabled (#2252) (47a49ac)
remove ACM sub-module (#2236) (6734dc7)
remove ASM sub-module (#2168) (010e034)
TPG>=6.14: promote enable_fqdn_network_policy to GA (#2225) (2c32408)

Bug Fixes

apply all valid configurations for cluster_dns_provider (#1805) (c7faa01)
dns endpoint for external traffic (#2244) (4726ab2)
main: unmark endpoint as sensitive (#2249) (2566fec)
node pool creation should depend on necessary firewall rules (#2245) (8098489)
private-cluster: master_ipv4_cidr_block on enable_private_nodes (#2250) (3ecf473)
re-align node_config_defaults to cluster types (#2256) (4df226d)
remove fuse csi driver from autopilot (#2218) (271af34)

`v35.0.1`

Compare Source

Bug Fixes

min_cpu_platform ref in cluster autoscaling (#2208) (f48e732)
node_pools_cgroup_mode var does not correctly handle the "all" map key (#2224) (53b1a50)

`v35.0.0`

Compare Source

⚠ BREAKING CHANGES

master_ipv4_cidr_block optional for private standard clusters (#2186)
TPG>=6.11: add endpoint_dns (#2180)
update-variant: allow updating disk_type, disk_size_gb, machine_type, enable_gcfs in place (#2195)
TPG>=6.8.0: add KCP log params (#2166)
private-cluster: use private endpoint (#2189)
Change the default value of "monitoring_enable_managed_prometheus" var to null (#2188)
TPG>=6.5.0: promote enable_gcfs to GA (#2178)
TPG>=6.7.0: promote secret_manager_config to GA (#2159)
TPG>=6.5.0: support gcp_filestore_csi_driver_config for autopilot (#2126)

Features

add logging_config and monitoring_config to autopilot modules (#2155) (0ebdfda)
Change the default value of "monitoring_enable_managed_prometheus" var to null (#2188) (31a1619)
deps: Update Terraform Google Provider to >= 6.7.0, < 6.11.0 (#2184) (d73e2e9)
master_ipv4_cidr_block optional for private standard clusters (#2186) (e0ea8e7)
Node pools can enable fast_socket (#2200) (f23d52f)
promote additive_vpc_scope_dns_domain to GA (#2194) (43d1c56)
TPG>=6.11: add endpoint_dns (#2180) (1f85f66)
TPG>=6.5.0: promote enable_gcfs to GA (#2178) (eb9b0be)
TPG>=6.5.0: support gcp_filestore_csi_driver_config for autopilot (#2126) (e3f016e)
TPG>=6.7.0: promote secret_manager_config to GA (#2159) (7931bf4)
TPG>=6.8.0: add KCP log params (#2166) (9a1f4ea)
update-variant: allow updating disk_type, disk_size_gb, machine_type, enable_gcfs in place (#2195) (276cbdb)

Bug Fixes

enable TPG v6.11+ (#2197) (e9ab0df)
limit TPG < 6.10 (#2183) (3122b9d)
node pool options cannot be set to false (#2187) (752db66)
private-cluster: use private endpoint (#2189) (4b155cd)
standardize to >= TF v1.3 (#2202) (a99aec2)
TPG>=5.12.0: Bump for #2142 (#2141) (#2170) (52f8bea)

`v34.0.0`

Compare Source

⚠ BREAKING CHANGES

TPG>=5.44.2: add standard cluster support for insecureKubeletReadonlyPortEnabled (#2082)
deps: Update Terraform terraform-google-modules/project-factory/google to v17 (#2109)

Features

Add create_ignore_already_exists to workload_identity (#2142) (76d779c)
safer-cluster: add create_service_account variable (#2138) (cccabcb)
TPG>=5.44.2: add standard cluster support for insecureKubeletReadonlyPortEnabled (#2082) (96626d5)

Bug Fixes

add kubelet_config to default-pool (#2147) (7828a0f)
add target tags to node_pool_auto_config for standard clusters (#2118) (d5f66e8)
correct confidential node field name (#2140) (373c969)
deps: Update Terraform terraform-google-modules/project-factory/google to v17 (#2109) (3073b04)
fix typo in kube-dns-upstream-nameservers configmap (#2149) (843c56c)
node_pools: Update Variants: Add recreate for secondary_boot_disk and local_ssd_ephemeral_count (beta) (#2139) (66231d5)
remove dns from autopilot (#2152) (2e645cd)
remove unnecessary lookup for safer_cluster nodepool ID (#2160) (179a8ec)
send provider enum values for insecureKubeletReadonlyPortEnabled (#2145) (922ab1d)
update resource names to snake_case (#2151) (375d27c)

`v33.1.0`

Compare Source

Features

add a flag to allow access through Google Cloud public IP addresses (#2078) (2f412bb)
added confidential-nodes flag for node-pools (#2110) (b2a597b)
enable L4 ILB subsetting support for safer clusters (#2105) (0733908)

Bug Fixes

acm: correct membership location (#2128) (7cf9894)
acm: use membership registration location (#2123) (caa194f)
allow changing enable_identity_service value in place (#2132) (9c2191e)
allow null enable_gcfs setting in defined nodepools (#2111) (700a01d)
autopilot: narrow version exclusion (#2112) (620bf32)
ignore control plane network when private endpoint subnet is set (#2122) (a4b130d)

`v33.0.4`

Compare Source

Bug Fixes

TPG < 6.2 for Autopilot (#2101) (bff49e1)

`v33.0.3`

Compare Source

Bug Fixes

correct gcfs_config value (#2095) (1b7a845)

`v33.0.2`

Compare Source

Bug Fixes

asm and auth allow TPGv6 (#2092) (0ce1df6)
no gcfs block when enable_gcfs null (#2093) (f4c1af2)

`v33.0.1`

Compare Source

Bug Fixes

avoid TPG v6.2.0 with Autopilot (#2086) (fdd1287)

`v33.0.0`

Compare Source

⚠ BREAKING CHANGES

beta-autopilot: enable gcfs by default (#2066)
TPG>=5.41: add config_sync.enabled (#2074)
update relay_mode to enable_relay (#2067)
private_cluster: enable private nodes by default (#2064)
deps: Update Terraform terraform-google-modules/project-factory/google to v16 (#2057)

Features

beta-autopilot: enable gcfs by default (#2066) (a083437)
deps: Update Terraform Google Provider to v6 (major) (#2063) (8b7e342)
private_cluster: enable private nodes by default (#2064) (e11787c)
support reservation affinity (#2010) (7cc0626)

Bug Fixes

avoid TPGv5.44.0 with Autopilot (#2076) (f54d2e1)
deps: Update Terraform terraform-google-modules/project-factory/google to v16 (#2057) (8e53122)
Node Pool enable_gcfs true:false (#1976) (419078d)
TPG>=5.41: add config_sync.enabled (#2074) (4939c6f)
update relay_mode to enable_relay (#2067) (dafdd72)

`v32.0.4`

Compare Source

Bug Fixes

allow enable_private_endpoint with no master_authorized_networks (#2058) (528b373)

`v32.0.3`

Compare Source

Bug Fixes

autopilot: option to configure gcfs (#2052) (c1a720a)

`v32.0.2`

Compare Source

Bug Fixes

autopilot: ignore gcfs null (#2049) (5e0de62)

`v32.0.1`

Compare Source

Bug Fixes

fleet_app_operator_permissions: enable multi use per project (#2045) (a83100d)
fleet_app_operator_permissions: optional groups and users (#2044) (a5a67e5)
gcfs AP diff and general cleanup (#2043) (ec42a18)
remove duplicte enable_secure_boot (#2040) (d469973)

`v32.0.0`

Compare Source

⚠ BREAKING CHANGES

TPG>=5.40.0: Add support for RayOperator Addon (#2032)
TPG>=5.33: add secret manager add-on config to beta modules (#1977)

Features

Add additional functionality for autopilot clusters (#1985) (3b0bbe8)
add notification event filter (#1996) (9ff1b5e)
add optional private_endpoint_subnetwork variable in private submodules (#2009) (7a2e9b8)
add support for logging_variant in Autopilot clusters (#1962) (08028a8)
add support for additive_vpc_scope_dns_domain (#1998) (b54b7ba)
add support for confidential storage + docs fixes (#2003) (270a5c7)
allow default node pools metadata key-value pairs to be disabled (#2005) (318f38f)
anthos modules remote fleet project (#1995) (674f772)
bump enable_intranode_visibility to GA (#1956) (4274b0e)
bump identity_service_config to ga (#1997) (9d6a400)
bump kubelet config to ga + minor doc fixes (#1994) (6bd1bc1)
cluster.tf: add support for setting cgroup mode (#2001) (3fc4db4)
enable binauthz for autopilot (#2030) (3ebf04a)
extend enable_secret_manager_addon to beta-autopilot clusters (#2017) (7f31e96)
Fleet app operator permissions (#1986) (e0fd03a)
support enable_nested_virtualization (#2012) (e298e74)
support workload_identity_config on autopilot (#2011) (b4f2e14)
TPG>=5.33: add secret manager add-on config to beta modules (#1977) (5c58d89)
TPG>=5.40.0: Add support for RayOperator Addon (#2032) (c046af1)

Bug Fixes

add missing gpu node pool param docs (#2023) (ac76d4d)
empty addons_config handling (#1978) (9ae8b38)
enable_confidential_storage fix (#2018) (12cfe5e)
skip service account random_string when not needed (#2024) (be88d19)

`v31.1.0`

Compare Source

Features

Add enable_cilium_clusterwide_network_policy support (#1972) (72cf873)
Add enable_l4_ilb_subsetting for autopilot clusters (#1969) (c48dc6e)
add pod_pids_limit for kubelet_config in all modules, example and autogen (#1922) (eec38a2)
Adding extra permissions to the cluster's default service account (#1943) (4fab404)
Set boot_disk_kms_key cluster wide and for cluster_autoscaling (#1959) (654868e)

Bug Fixes

avoid auto_provisioning_defaults drift (#1806) (0005ab9)
firewall rules for autopilot clusters are ineffective. add cluster_network_tag to autopilot cluster network_tags if firewalls are toggled on (#1817) (e7b20cd)
Fix the value of output "identity_service_enabled" in beta modules (#1982) (a6210fc)

`v31.0.0`

Compare Source

⚠ BREAKING CHANGES

TPG>=5.25.0: bump for #1948 (#1955)
TPG>=5.21: add queued_provisioning (#1950)
TPG>=5.25.0: Add support for StatefulHA Addon (#1948)
deps: Update Terraform terraform-google-modules/project-factory/google to v15 (#1936)

Features

Add local_ssd_ephemeral_count to default configuration (#1944) (04ebd0c)
add missing dns_cache output in non beta (#1864) (3d5cc9f)
Add option image_type in cluster_autoscaling block (#1905) (2272164)
Add secondary_boot_disks to node_pool configuration. (#1946) (11bae67)
add security posture VULNERABILITY_ENTERPRISE (#1947) (c48c8ab)
add support for gpu_sharing_config on nodepool (#1874) (b57387c)
Add threads_per_core setting for node config in node pools (#1942) (e573ced)
Add upgrade_settings for NAP created node pools (#1908) (c87bb41)
TPG>=5.21: add queued_provisioning (#1950) (c87333b)
TPG>=5.25.0: Add support for StatefulHA Addon (#1948) (acbb453)

Bug Fixes

add gpu_driver_version to recreate list + docs (#1913) (12cf40f)
deps: Update Terraform terraform-google-modules/project-factory/google to v15 (#1936) (d01e5bc)
docs: remove beta from docs from non beta arguments (#1957) (3de63b3)
dynamic block ephemeral_storage_local_ssd_config (#1951) (26eb7c0)
local nvme ssd count (#1937) (dbd90e3)
TPG>=5.25.0: bump for #1948 (#1955) (b12c2e7)

`v30.3.0`

Compare Source

Features

add enable_l4_ilb_subsetting for GA TPG (#1924) (da0476a)
adds local_nvme_ssd_block_config to beta-public-cluster (#1912) (f7c2ed9)
network tags for autoprovisioned node pools (#1920) (f864e8a)
safer-clusters: add components selection for monitoring (#1851) (15b472f)

Bug Fixes

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

[ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Feb 06 '25 19:02 renovate-bot

/gcbrun

Feb 06 '25 19:02 dpebot

/gcbrun

Mar 17 '25 19:03 dpebot

/gcbrun

Apr 11 '25 00:04 dpebot

/gcbrun

Apr 23 '25 20:04 dpebot