Skip to content

Commit 0266d26

Browse files
committed
Added variables to autogen, using k8s latest
1 parent 2b599ff commit 0266d26

File tree

4 files changed

+22
-4
lines changed

4 files changed

+22
-4
lines changed

autogen/variables.tf

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -211,3 +211,23 @@ variable "service_account" {
211211
description = "The service account to default running nodes as if not overridden in `node_pools`. Defaults to the compute engine default service account"
212212
default = ""
213213
}
214+
215+
variable "enable_basic_auth" {
216+
description = "Basic authentication allows a user to authenticate to the cluster with a username and password. To maximize the security of your cluster, disable this option. Basic authentication is not recommended because it provides no confidentiality protection for transmitted credentials"
217+
default = "true"
218+
}
219+
220+
variable "basic_auth_username" {
221+
description = "Kubernetes HTTP Basic auth username. Only used if `enable_basic_auth` is true"
222+
default = ""
223+
}
224+
225+
variable "basic_auth_password" {
226+
description = "Kubernetes HTTP Basic auth password. Only used if `enable_basic_auth` is true"
227+
default = ""
228+
}
229+
230+
variable "issue_client_certificate" {
231+
description = "Issues a client certificate to authenticate to the cluster endpoint. To maximize the security of your cluster, leave this option disabled. Client certificates don't automatically rotate and aren't easily revocable. WARNING: changing this after cluster creation is destructive!"
232+
default = "false"
233+
}

examples/disable_client_cert/main.tf

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,8 +33,6 @@ module "gke" {
3333
subnetwork = "${var.subnetwork}"
3434
ip_range_pods = "${var.ip_range_pods}"
3535
ip_range_services = "${var.ip_range_services}"
36-
kubernetes_version = "1.11.5-gke.4"
37-
node_version = "1.11.5-gke.4"
3836
service_account = "${var.compute_engine_service_account}"
3937

4038
enable_basic_auth = false

main.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -153,4 +153,4 @@ locals {
153153
data "google_container_engine_versions" "region" {
154154
zone = "${data.google_compute_zones.available.names[0]}"
155155
project = "${var.project_id}"
156-
}
156+
}

variables.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -230,4 +230,4 @@ variable "basic_auth_password" {
230230
variable "issue_client_certificate" {
231231
description = "Issues a client certificate to authenticate to the cluster endpoint. To maximize the security of your cluster, leave this option disabled. Client certificates don't automatically rotate and aren't easily revocable. WARNING: changing this after cluster creation is destructive!"
232232
default = "false"
233-
}
233+
}

0 commit comments

Comments
 (0)