configure_ip_masq config and non_masquerade_cidrs are invalid for Autopilot Clusters and should be replaced with EgressNATPolicy

[fernandoiury]

TL;DR

Autopilot disables access to kube-system namespace. Thus the current approach to apply the ip-masq configmap does not work.

Expected behavior

I'd expect to see the EgressNATPolicy being configured as per: https://cloud.google.com/kubernetes-engine/docs/concepts/ip-masquerade-agent#expandable-2

Observed behavior

Terraform Configuration

configure_ip_masq = true

Terraform Version

any

Additional information

No response