Skip to content

Commit 6a99347

Browse files
stanley98yustanley98yu
authored
feat: Add Identity Service config to beta modules (#1142)
* Add Identity Service config to cluster * Hard-code config value in simple_regional_beta example * Lint
1 parent 35ac28c commit 6a99347

File tree

31 files changed

+115
-5
lines changed

31 files changed

+115
-5
lines changed

‎autogen/main/cluster.tf.tmpl

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -145,6 +145,13 @@ resource "google_container_cluster" "primary" {
145145
}
146146
}
147147

148+
dynamic "identity_service_config" {
149+
for_each = var.enable_identity_service ? [var.enable_identity_service] : []
150+
content {
151+
enabled = identity_service_config.value
152+
}
153+
}
154+
148155
enable_l4_ilb_subsetting = var.enable_l4_ilb_subsetting
149156
{% endif %}
150157
dynamic "master_authorized_networks_config" {

‎autogen/main/main.tf.tmpl

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -147,6 +147,7 @@ locals {
147147
cluster_output_pod_security_policy_enabled = google_container_cluster.primary.pod_security_policy_config != null && length(google_container_cluster.primary.pod_security_policy_config) == 1 ? google_container_cluster.primary.pod_security_policy_config.0.enabled : false
148148
cluster_output_intranode_visbility_enabled = google_container_cluster.primary.enable_intranode_visibility
149149
cluster_output_vertical_pod_autoscaling_enabled = google_container_cluster.primary.vertical_pod_autoscaling != null && length(google_container_cluster.primary.vertical_pod_autoscaling) == 1 ? google_container_cluster.primary.vertical_pod_autoscaling.0.enabled : false
150+
cluster_output_identity_service_enabled = google_container_cluster.primary.identity_service_config != null && length(google_container_cluster.primary.identity_service_config) == 1 ? google_container_cluster.primary.identity_service_config.0.enabled : false
150151

151152
# /BETA features
152153
{% endif %}

‎autogen/main/outputs.tf.tmpl

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -184,6 +184,11 @@ output "vertical_pod_autoscaling_enabled" {
184184
value = local.cluster_vertical_pod_autoscaling_enabled
185185
}
186186

187+
output "identity_service_enabled" {
188+
description = "Whether Identity Service is enabled"
189+
value = local.cluster_pod_security_policy_enabled
190+
}
191+
187192
output "tpu_ipv4_cidr_block" {
188193
description = "The IP range in CIDR notation used for the TPUs"
189194
value = var.enable_tpu ? google_container_cluster.primary.tpu_ipv4_cidr_block : null

‎autogen/main/variables.tf.tmpl

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -527,6 +527,12 @@ variable "enable_intranode_visibility" {
527527
description = "Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network"
528528
default = false
529529
}
530+
531+
variable "enable_identity_service" {
532+
type = bool
533+
description = "Enable the Identity Service component, which allows customers to use external identity providers with the K8S API."
534+
default = false
535+
}
530536
{% endif %}
531537

532538
variable "authenticator_security_group" {

‎autogen/main/versions.tf.tmpl

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ terraform {
2424
required_providers {
2525
google-beta = {
2626
source = "hashicorp/google-beta"
27-
version = ">= 4.3.0, < 5.0"
27+
version = ">= 4.6.0, < 5.0"
2828
}
2929
kubernetes = {
3030
source = "hashicorp/kubernetes"

‎examples/simple_regional_beta/main.tf

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,7 @@ module "gke" {
4949
database_encryption = var.database_encryption
5050
enable_binary_authorization = var.enable_binary_authorization
5151
enable_pod_security_policy = var.enable_pod_security_policy
52+
enable_identity_service = true
5253
release_channel = "REGULAR"
5354

5455
# Disable workload identity

‎modules/beta-private-cluster-update-variant/README.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -180,6 +180,7 @@ Then perform the following commands on the root folder:
180180
| dns\_cache | (Beta) The status of the NodeLocal DNSCache addon. | `bool` | `false` | no |
181181
| enable\_binary\_authorization | Enable BinAuthZ Admission controller | `bool` | `false` | no |
182182
| enable\_confidential\_nodes | An optional flag to enable confidential node config. | `bool` | `false` | no |
183+
| enable\_identity\_service | Enable the Identity Service component, which allows customers to use external identity providers with the K8S API. | `bool` | `false` | no |
183184
| enable\_intranode\_visibility | Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network | `bool` | `false` | no |
184185
| enable\_kubernetes\_alpha | Whether to enable Kubernetes Alpha features for this cluster. Note that when this option is enabled, the cluster cannot be upgraded and will be automatically deleted after 30 days. | `bool` | `false` | no |
185186
| enable\_l4\_ilb\_subsetting | Enable L4 ILB Subsetting on the cluster | `bool` | `false` | no |
@@ -264,6 +265,7 @@ Then perform the following commands on the root folder:
264265
| horizontal\_pod\_autoscaling\_enabled | Whether horizontal pod autoscaling enabled |
265266
| http\_load\_balancing\_enabled | Whether http load balancing enabled |
266267
| identity\_namespace | Workload Identity pool |
268+
| identity\_service\_enabled | Whether Identity Service is enabled |
267269
| instance\_group\_urls | List of GKE generated instance groups |
268270
| intranode\_visibility\_enabled | Whether intra-node visibility is enabled |
269271
| istio\_enabled | Whether Istio is enabled |

‎modules/beta-private-cluster-update-variant/cluster.tf

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -127,6 +127,13 @@ resource "google_container_cluster" "primary" {
127127
}
128128
}
129129

130+
dynamic "identity_service_config" {
131+
for_each = var.enable_identity_service ? [var.enable_identity_service] : []
132+
content {
133+
enabled = identity_service_config.value
134+
}
135+
}
136+
130137
enable_l4_ilb_subsetting = var.enable_l4_ilb_subsetting
131138
dynamic "master_authorized_networks_config" {
132139
for_each = local.master_authorized_networks_config

‎modules/beta-private-cluster-update-variant/main.tf

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -131,6 +131,7 @@ locals {
131131
cluster_output_pod_security_policy_enabled = google_container_cluster.primary.pod_security_policy_config != null && length(google_container_cluster.primary.pod_security_policy_config) == 1 ? google_container_cluster.primary.pod_security_policy_config.0.enabled : false
132132
cluster_output_intranode_visbility_enabled = google_container_cluster.primary.enable_intranode_visibility
133133
cluster_output_vertical_pod_autoscaling_enabled = google_container_cluster.primary.vertical_pod_autoscaling != null && length(google_container_cluster.primary.vertical_pod_autoscaling) == 1 ? google_container_cluster.primary.vertical_pod_autoscaling.0.enabled : false
134+
cluster_output_identity_service_enabled = google_container_cluster.primary.identity_service_config != null && length(google_container_cluster.primary.identity_service_config) == 1 ? google_container_cluster.primary.identity_service_config.0.enabled : false
134135

135136
# /BETA features
136137

‎modules/beta-private-cluster-update-variant/outputs.tf

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -181,6 +181,11 @@ output "vertical_pod_autoscaling_enabled" {
181181
value = local.cluster_vertical_pod_autoscaling_enabled
182182
}
183183

184+
output "identity_service_enabled" {
185+
description = "Whether Identity Service is enabled"
186+
value = local.cluster_pod_security_policy_enabled
187+
}
188+
184189
output "tpu_ipv4_cidr_block" {
185190
description = "The IP range in CIDR notation used for the TPUs"
186191
value = var.enable_tpu ? google_container_cluster.primary.tpu_ipv4_cidr_block : null

‎modules/beta-private-cluster-update-variant/variables.tf

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -507,6 +507,12 @@ variable "enable_intranode_visibility" {
507507
default = false
508508
}
509509

510+
variable "enable_identity_service" {
511+
type = bool
512+
description = "Enable the Identity Service component, which allows customers to use external identity providers with the K8S API."
513+
default = false
514+
}
515+
510516
variable "authenticator_security_group" {
511517
type = string
512518
description = "The name of the RBAC security group for use with Google security groups in Kubernetes RBAC. Group name must be in format [email protected]"

‎modules/beta-private-cluster-update-variant/versions.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ terraform {
2121
required_providers {
2222
google-beta = {
2323
source = "hashicorp/google-beta"
24-
version = ">= 4.3.0, < 5.0"
24+
version = ">= 4.6.0, < 5.0"
2525
}
2626
kubernetes = {
2727
source = "hashicorp/kubernetes"

‎modules/beta-private-cluster/README.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -158,6 +158,7 @@ Then perform the following commands on the root folder:
158158
| dns\_cache | (Beta) The status of the NodeLocal DNSCache addon. | `bool` | `false` | no |
159159
| enable\_binary\_authorization | Enable BinAuthZ Admission controller | `bool` | `false` | no |
160160
| enable\_confidential\_nodes | An optional flag to enable confidential node config. | `bool` | `false` | no |
161+
| enable\_identity\_service | Enable the Identity Service component, which allows customers to use external identity providers with the K8S API. | `bool` | `false` | no |
161162
| enable\_intranode\_visibility | Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network | `bool` | `false` | no |
162163
| enable\_kubernetes\_alpha | Whether to enable Kubernetes Alpha features for this cluster. Note that when this option is enabled, the cluster cannot be upgraded and will be automatically deleted after 30 days. | `bool` | `false` | no |
163164
| enable\_l4\_ilb\_subsetting | Enable L4 ILB Subsetting on the cluster | `bool` | `false` | no |
@@ -242,6 +243,7 @@ Then perform the following commands on the root folder:
242243
| horizontal\_pod\_autoscaling\_enabled | Whether horizontal pod autoscaling enabled |
243244
| http\_load\_balancing\_enabled | Whether http load balancing enabled |
244245
| identity\_namespace | Workload Identity pool |
246+
| identity\_service\_enabled | Whether Identity Service is enabled |
245247
| instance\_group\_urls | List of GKE generated instance groups |
246248
| intranode\_visibility\_enabled | Whether intra-node visibility is enabled |
247249
| istio\_enabled | Whether Istio is enabled |

‎modules/beta-private-cluster/cluster.tf

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -127,6 +127,13 @@ resource "google_container_cluster" "primary" {
127127
}
128128
}
129129

130+
dynamic "identity_service_config" {
131+
for_each = var.enable_identity_service ? [var.enable_identity_service] : []
132+
content {
133+
enabled = identity_service_config.value
134+
}
135+
}
136+
130137
enable_l4_ilb_subsetting = var.enable_l4_ilb_subsetting
131138
dynamic "master_authorized_networks_config" {
132139
for_each = local.master_authorized_networks_config

‎modules/beta-private-cluster/main.tf

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -131,6 +131,7 @@ locals {
131131
cluster_output_pod_security_policy_enabled = google_container_cluster.primary.pod_security_policy_config != null && length(google_container_cluster.primary.pod_security_policy_config) == 1 ? google_container_cluster.primary.pod_security_policy_config.0.enabled : false
132132
cluster_output_intranode_visbility_enabled = google_container_cluster.primary.enable_intranode_visibility
133133
cluster_output_vertical_pod_autoscaling_enabled = google_container_cluster.primary.vertical_pod_autoscaling != null && length(google_container_cluster.primary.vertical_pod_autoscaling) == 1 ? google_container_cluster.primary.vertical_pod_autoscaling.0.enabled : false
134+
cluster_output_identity_service_enabled = google_container_cluster.primary.identity_service_config != null && length(google_container_cluster.primary.identity_service_config) == 1 ? google_container_cluster.primary.identity_service_config.0.enabled : false
134135

135136
# /BETA features
136137

‎modules/beta-private-cluster/outputs.tf

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -181,6 +181,11 @@ output "vertical_pod_autoscaling_enabled" {
181181
value = local.cluster_vertical_pod_autoscaling_enabled
182182
}
183183

184+
output "identity_service_enabled" {
185+
description = "Whether Identity Service is enabled"
186+
value = local.cluster_pod_security_policy_enabled
187+
}
188+
184189
output "tpu_ipv4_cidr_block" {
185190
description = "The IP range in CIDR notation used for the TPUs"
186191
value = var.enable_tpu ? google_container_cluster.primary.tpu_ipv4_cidr_block : null

‎modules/beta-private-cluster/variables.tf

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -507,6 +507,12 @@ variable "enable_intranode_visibility" {
507507
default = false
508508
}
509509

510+
variable "enable_identity_service" {
511+
type = bool
512+
description = "Enable the Identity Service component, which allows customers to use external identity providers with the K8S API."
513+
default = false
514+
}
515+
510516
variable "authenticator_security_group" {
511517
type = string
512518
description = "The name of the RBAC security group for use with Google security groups in Kubernetes RBAC. Group name must be in format [email protected]"

‎modules/beta-private-cluster/versions.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ terraform {
2121
required_providers {
2222
google-beta = {
2323
source = "hashicorp/google-beta"
24-
version = ">= 4.3.0, < 5.0"
24+
version = ">= 4.6.0, < 5.0"
2525
}
2626
kubernetes = {
2727
source = "hashicorp/kubernetes"

‎modules/beta-public-cluster-update-variant/README.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -173,6 +173,7 @@ Then perform the following commands on the root folder:
173173
| dns\_cache | (Beta) The status of the NodeLocal DNSCache addon. | `bool` | `false` | no |
174174
| enable\_binary\_authorization | Enable BinAuthZ Admission controller | `bool` | `false` | no |
175175
| enable\_confidential\_nodes | An optional flag to enable confidential node config. | `bool` | `false` | no |
176+
| enable\_identity\_service | Enable the Identity Service component, which allows customers to use external identity providers with the K8S API. | `bool` | `false` | no |
176177
| enable\_intranode\_visibility | Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network | `bool` | `false` | no |
177178
| enable\_kubernetes\_alpha | Whether to enable Kubernetes Alpha features for this cluster. Note that when this option is enabled, the cluster cannot be upgraded and will be automatically deleted after 30 days. | `bool` | `false` | no |
178179
| enable\_l4\_ilb\_subsetting | Enable L4 ILB Subsetting on the cluster | `bool` | `false` | no |
@@ -253,6 +254,7 @@ Then perform the following commands on the root folder:
253254
| horizontal\_pod\_autoscaling\_enabled | Whether horizontal pod autoscaling enabled |
254255
| http\_load\_balancing\_enabled | Whether http load balancing enabled |
255256
| identity\_namespace | Workload Identity pool |
257+
| identity\_service\_enabled | Whether Identity Service is enabled |
256258
| instance\_group\_urls | List of GKE generated instance groups |
257259
| intranode\_visibility\_enabled | Whether intra-node visibility is enabled |
258260
| istio\_enabled | Whether Istio is enabled |

‎modules/beta-public-cluster-update-variant/cluster.tf

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -127,6 +127,13 @@ resource "google_container_cluster" "primary" {
127127
}
128128
}
129129

130+
dynamic "identity_service_config" {
131+
for_each = var.enable_identity_service ? [var.enable_identity_service] : []
132+
content {
133+
enabled = identity_service_config.value
134+
}
135+
}
136+
130137
enable_l4_ilb_subsetting = var.enable_l4_ilb_subsetting
131138
dynamic "master_authorized_networks_config" {
132139
for_each = local.master_authorized_networks_config

‎modules/beta-public-cluster-update-variant/main.tf

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -130,6 +130,7 @@ locals {
130130
cluster_output_pod_security_policy_enabled = google_container_cluster.primary.pod_security_policy_config != null && length(google_container_cluster.primary.pod_security_policy_config) == 1 ? google_container_cluster.primary.pod_security_policy_config.0.enabled : false
131131
cluster_output_intranode_visbility_enabled = google_container_cluster.primary.enable_intranode_visibility
132132
cluster_output_vertical_pod_autoscaling_enabled = google_container_cluster.primary.vertical_pod_autoscaling != null && length(google_container_cluster.primary.vertical_pod_autoscaling) == 1 ? google_container_cluster.primary.vertical_pod_autoscaling.0.enabled : false
133+
cluster_output_identity_service_enabled = google_container_cluster.primary.identity_service_config != null && length(google_container_cluster.primary.identity_service_config) == 1 ? google_container_cluster.primary.identity_service_config.0.enabled : false
133134

134135
# /BETA features
135136

‎modules/beta-public-cluster-update-variant/outputs.tf

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,11 @@ output "vertical_pod_autoscaling_enabled" {
171171
value = local.cluster_vertical_pod_autoscaling_enabled
172172
}
173173

174+
output "identity_service_enabled" {
175+
description = "Whether Identity Service is enabled"
176+
value = local.cluster_pod_security_policy_enabled
177+
}
178+
174179
output "tpu_ipv4_cidr_block" {
175180
description = "The IP range in CIDR notation used for the TPUs"
176181
value = var.enable_tpu ? google_container_cluster.primary.tpu_ipv4_cidr_block : null

‎modules/beta-public-cluster-update-variant/variables.tf

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -476,6 +476,12 @@ variable "enable_intranode_visibility" {
476476
default = false
477477
}
478478

479+
variable "enable_identity_service" {
480+
type = bool
481+
description = "Enable the Identity Service component, which allows customers to use external identity providers with the K8S API."
482+
default = false
483+
}
484+
479485
variable "authenticator_security_group" {
480486
type = string
481487
description = "The name of the RBAC security group for use with Google security groups in Kubernetes RBAC. Group name must be in format [email protected]"

‎modules/beta-public-cluster-update-variant/versions.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ terraform {
2121
required_providers {
2222
google-beta = {
2323
source = "hashicorp/google-beta"
24-
version = ">= 4.3.0, < 5.0"
24+
version = ">= 4.6.0, < 5.0"
2525
}
2626
kubernetes = {
2727
source = "hashicorp/kubernetes"

‎modules/beta-public-cluster/README.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -151,6 +151,7 @@ Then perform the following commands on the root folder:
151151
| dns\_cache | (Beta) The status of the NodeLocal DNSCache addon. | `bool` | `false` | no |
152152
| enable\_binary\_authorization | Enable BinAuthZ Admission controller | `bool` | `false` | no |
153153
| enable\_confidential\_nodes | An optional flag to enable confidential node config. | `bool` | `false` | no |
154+
| enable\_identity\_service | Enable the Identity Service component, which allows customers to use external identity providers with the K8S API. | `bool` | `false` | no |
154155
| enable\_intranode\_visibility | Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network | `bool` | `false` | no |
155156
| enable\_kubernetes\_alpha | Whether to enable Kubernetes Alpha features for this cluster. Note that when this option is enabled, the cluster cannot be upgraded and will be automatically deleted after 30 days. | `bool` | `false` | no |
156157
| enable\_l4\_ilb\_subsetting | Enable L4 ILB Subsetting on the cluster | `bool` | `false` | no |
@@ -231,6 +232,7 @@ Then perform the following commands on the root folder:
231232
| horizontal\_pod\_autoscaling\_enabled | Whether horizontal pod autoscaling enabled |
232233
| http\_load\_balancing\_enabled | Whether http load balancing enabled |
233234
| identity\_namespace | Workload Identity pool |
235+
| identity\_service\_enabled | Whether Identity Service is enabled |
234236
| instance\_group\_urls | List of GKE generated instance groups |
235237
| intranode\_visibility\_enabled | Whether intra-node visibility is enabled |
236238
| istio\_enabled | Whether Istio is enabled |

‎modules/beta-public-cluster/cluster.tf

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -127,6 +127,13 @@ resource "google_container_cluster" "primary" {
127127
}
128128
}
129129

130+
dynamic "identity_service_config" {
131+
for_each = var.enable_identity_service ? [var.enable_identity_service] : []
132+
content {
133+
enabled = identity_service_config.value
134+
}
135+
}
136+
130137
enable_l4_ilb_subsetting = var.enable_l4_ilb_subsetting
131138
dynamic "master_authorized_networks_config" {
132139
for_each = local.master_authorized_networks_config

‎modules/beta-public-cluster/main.tf

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -130,6 +130,7 @@ locals {
130130
cluster_output_pod_security_policy_enabled = google_container_cluster.primary.pod_security_policy_config != null && length(google_container_cluster.primary.pod_security_policy_config) == 1 ? google_container_cluster.primary.pod_security_policy_config.0.enabled : false
131131
cluster_output_intranode_visbility_enabled = google_container_cluster.primary.enable_intranode_visibility
132132
cluster_output_vertical_pod_autoscaling_enabled = google_container_cluster.primary.vertical_pod_autoscaling != null && length(google_container_cluster.primary.vertical_pod_autoscaling) == 1 ? google_container_cluster.primary.vertical_pod_autoscaling.0.enabled : false
133+
cluster_output_identity_service_enabled = google_container_cluster.primary.identity_service_config != null && length(google_container_cluster.primary.identity_service_config) == 1 ? google_container_cluster.primary.identity_service_config.0.enabled : false
133134

134135
# /BETA features
135136

‎modules/beta-public-cluster/outputs.tf

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,11 @@ output "vertical_pod_autoscaling_enabled" {
171171
value = local.cluster_vertical_pod_autoscaling_enabled
172172
}
173173

174+
output "identity_service_enabled" {
175+
description = "Whether Identity Service is enabled"
176+
value = local.cluster_pod_security_policy_enabled
177+
}
178+
174179
output "tpu_ipv4_cidr_block" {
175180
description = "The IP range in CIDR notation used for the TPUs"
176181
value = var.enable_tpu ? google_container_cluster.primary.tpu_ipv4_cidr_block : null

‎modules/beta-public-cluster/variables.tf

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -476,6 +476,12 @@ variable "enable_intranode_visibility" {
476476
default = false
477477
}
478478

479+
variable "enable_identity_service" {
480+
type = bool
481+
description = "Enable the Identity Service component, which allows customers to use external identity providers with the K8S API."
482+
default = false
483+
}
484+
479485
variable "authenticator_security_group" {
480486
type = string
481487
description = "The name of the RBAC security group for use with Google security groups in Kubernetes RBAC. Group name must be in format [email protected]"

‎modules/beta-public-cluster/versions.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ terraform {
2121
required_providers {
2222
google-beta = {
2323
source = "hashicorp/google-beta"
24-
version = ">= 4.3.0, < 5.0"
24+
version = ">= 4.6.0, < 5.0"
2525
}
2626
kubernetes = {
2727
source = "hashicorp/kubernetes"

0 commit comments

Comments
 (0)