terraform-google-kubernetes-engine

terraform-google-kubernetes-engine copied to clipboard

Support confidential nodepools

2

### TL;DR We currently support confidential clusters (a cluster-level setting that enforces that all nodepools are confidential VMs), but do not support the setting at a per-nodepool level. We could...

jawnsy

Template file with extension .tf and not .tf.tmpl

1

### TL;DR The file [terraform-google-kubernetes-engine](https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/tree/b9287de679592a2adcae4d98dcfee33a001f328b)/[autogen](https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/tree/b9287de679592a2adcae4d98dcfee33a001f328b/autogen)/[main](https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/tree/b9287de679592a2adcae4d98dcfee33a001f328b/autogen/main)/variables_defaults.tf has the `.tf` extension instead of `.tf.tmpl` like the rest of the files in that folder. ### Expected behavior No errors in a project using...

akerone

feat!: add boot_disk_kms_key variable for node pools to GA modules

3

Add support for boot_disk_kms_key for node pools that allows encrypting boot disks with customer-managed encryption keys. https://cloud.google.com/kubernetes-engine/docs/how-to/using-cmek https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/container_cluster#boot_disk_kms_key

r1c0x

Expose service account key file variable

2

Expose service account key file variable due to default account not having permissions to retrieve cluster credentials to run kubectl commands

alexw19

### TL;DR Using the ACM submodule, would like to see other options other than SSH key be available for ACM to use to authenticate to the backing git repo. My...

grsiepka

[beta-private-cluster-update-variant] Enable image streaming at cluster level

2

### TL;DR The documentation describes the `enable_gcfs` flag for node pools, but this does not seem to enable the cluster-level image streaming option ### Terraform Resources _No response_ ### Detailed...

jawnsy

### TL;DR Terraform can't create a plan when resource outputs are used in the node_pools list(map(string)). This is because the module uses the name attribute to create a map(map(string)) and...

gtear

fix: avoid `auto_provisioning_defaults` drift

4

fixes https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/issues/1596 This PR added two new optional fields to `var.cluster_autoscaling`, `enable_secure_boot=false`, and `enable_integrity_monitoring=true`. design decisions: - `enable_integrity_monitoring` defaults to `true`, which is what other places are using - `enable_secure_boot`...

michaellzc

feat: transition policy controller

1

apeabody

feat: adds local_nvme_ssd_block_config to beta-public-cluster

2

fl0-m