terraform-google-kubernetes-engine

terraform-google-kubernetes-engine copied to clipboard

How to forbid access to GKE ? master_authorized_networks = [] is disabling the feature, not the access.

7

I want to secure the access to a GKE so I need to enable "Control plane authorized networks", but I don't have any network to authorize at the moment. According...

lchastel

Deprecation warning about `workload_identity_config. identity_namespace`

2

When planning and applying, we get the following warning: ``` ╷ │ Warning: Deprecated Attribute │ │ with module.stack.module.gke.module.gke.google_container_cluster.primary, │ on .terraform/modules/stack.gke.gke/modules/private-cluster/cluster.tf line 22, in resource "google_container_cluster" "primary": │ 22:...

lra

Windows node pools depend on Linux node pools

7

Hi, We are getting an error when trying to create a GKE cluster with a windows node pool. This is the error message: ```module.gke.google_container_node_pool.pools["node-pool"]: Still creating... [6m20s elapsed] module.gke.google_container_node_pool.pools["node-pool"]: Still...

fsequeira1

Diff shown when running `terraform apply` twice with the same config

1

When running the `terraform apply` twice on the same config we see a diff. The config: ``` module "example_workload_identity" { source = "terraform-google-modules/kubernetes-engine/google//modules/workload-identity" name = "example" gcp_sa_name = "example-svc" namespace...

ronilichtman

how to make ACM module depend on hub?

6

Before installing Anthos Config Management (ACM), the underlying GKE cluster needs to be registered with Connect/Hub. How can I enforce this dependency in the terraform? The hub module provides a...

jtangney

Replace hub module with native resources

6

We should replace provisioners in our module now that there is native support https://github.com/GoogleCloudPlatform/magic-modules/pull/4600

bharathkkb

beta-private-cluster-update-variant should generate new node pool ID if node_pools_taints is changed

2

beta-private-cluster-update-variant does not currently generate a new node pool random suffix is `node_pools_taints` is changed. This results in a name conflict error, like: ``` Error: error creating NodePool: googleapi: Error...

eripa

Kubernetes Provider v2 Support

7

Hi! Any plans to support the new 2.x Kubernetes provider? The upgrade path doesn't look too bad: https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/guides/v2-upgrade-guide.

harjot1singh

Invalid count argument

19

Hi. I tried setting up gke private cluster (safer-cluster-update-variant) and whenever I make any errors (accidentaly giving the wrong image name or machine type and so on), the apply fails...

tvvignesh

IAP Bastion Host example Tinyproxy improvements

11

Currently the [Safer Cluster Access with IAP Bastion Host](https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/tree/master/examples/safer_cluster_iap_bastion#safer-cluster-access-with-iap-bastion-host) example does not monitor the status of Tinyproxy. We should consider adding a custom conf file which writes to a logfile...

bharathkkb