1/**
2 * Copyright 2022 Google LLC
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17resource "google_container_cluster" "foo" {
18 addons_config {
19 network_policy_config {
20 disabled = true
21 }
22 }
23
24 cluster_autoscaling {
25 autoscaling_profile = "BALANCED"
26 enabled = false
27 }
28
29 cluster_ipv4_cidr = "10.12.0.0/14"
30
31 cluster_telemetry {
32 type = "ENABLED"
33 }
34
35 database_encryption {
36 state = "DECRYPTED"
37 }
38
39 enable_binary_authorization = false
40 enable_intranode_visibility = false
41 enable_kubernetes_alpha = false
42 enable_legacy_abac = false
43 enable_shielded_nodes = false
44 enable_tpu = false
45 location = "us-central1-c"
46 logging_service = "logging.googleapis.com/kubernetes"
47
48 master_auth {
49 client_certificate_config {
50 issue_client_certificate = false
51 }
52 }
53
54 monitoring_service = "monitoring.googleapis.com/kubernetes"
55 name = "twenty-namespaces"
56 network = "projects/my-project/global/networks/default"
57
58 network_policy {
59 enabled = false
60 }
61
62 networking_mode = "ROUTES"
63
64 node_config {
65 disk_size_gb = 100
66 disk_type = "pd-standard"
67 image_type = "COS"
68 machine_type = "n1-standard-1"
69
70 metadata = {
71 disable-legacy-endpoints = "true"
72 }
73
74 oauth_scopes = ["https://www.googleapis.com/auth/devstorage.read_only", "https://www.googleapis.com/auth/logging.write", "https://www.googleapis.com/auth/monitoring", "https://www.googleapis.com/auth/service.management.readonly", "https://www.googleapis.com/auth/servicecontrol", "https://www.googleapis.com/auth/trace.append"]
75 preemptible = false
76 service_account = "default"
77
78 shielded_instance_config {
79 enable_integrity_monitoring = true
80 enable_secure_boot = false
81 }
82
83 workload_metadata_config {
84 node_metadata = "GKE_METADATA_SERVER"
85 }
86 }
87
88 node_version = "1.16.15-gke.1600"
89
90 pod_security_policy_config {
91 enabled = false
92 }
93
94 project = "my-project"
95 release_channel = {}
96
97 resource_labels = {
98 managed-by-cnrm = "true"
99 }
100
101 subnetwork = "projects/my-project/regions/us-central1/subnetworks/default"
102
103 workload_identity_config {
104 workload_pool = "my-project.svc.id.goog"
105 }
106}
View as plain text