disable master client cert auth

florenciacomuzzi · florenciacomuzzi · commit 4ea261aba070 · 2025-03-25T14:48:31.000-04:00
diff --git a/modules/private-k8s-cluster/main.tf b/modules/private-k8s-cluster/main.tf
@@ -29,6 +29,8 @@ resource "google_container_cluster" "gke_cluster" {
     channel = "RAPID"
   }
 
+  enable_intranode_visibility = true
+
   cluster_autoscaling {
     enabled = true
     resource_limits {
@@ -61,6 +63,12 @@ resource "google_container_cluster" "gke_cluster" {
     }
   }
 
+  master_auth {
+    client_certificate_config {
+      issue_client_certificate = false
+    }
+  }
+
   ip_allocation_policy {
     cluster_secondary_range_name  = var.cluster_secondary_range_name
     services_secondary_range_name = var.services_secondary_range_name
@@ -94,6 +102,9 @@ resource "google_container_node_pool" "gke_nodes" {
     workload_metadata_config {
       mode = "GKE_METADATA_SERVER"
     }
+    labels = {
+      "env" = "test"
+    }
   }
 
   depends_on = [google_container_cluster.gke_cluster]

Original file line number	Diff line number	Diff line change
`@@ -29,6 +29,8 @@ resource "google_container_cluster" "gke_cluster" {`
`29`	`29`	`channel = "RAPID"`
`30`	`30`	`}`
`31`	`31`
	`32`	`+ enable_intranode_visibility = true`
	`33`	`+`
`32`	`34`	`cluster_autoscaling {`
`33`	`35`	`enabled = true`
`34`	`36`	`resource_limits {`
`@@ -61,6 +63,12 @@ resource "google_container_cluster" "gke_cluster" {`
`61`	`63`	`}`
`62`	`64`	`}`
`63`	`65`
	`66`	`+ master_auth {`
	`67`	`+ client_certificate_config {`
	`68`	`+ issue_client_certificate = false`
	`69`	`+ }`
	`70`	`+ }`
	`71`	`+`
`64`	`72`	`ip_allocation_policy {`
`65`	`73`	`cluster_secondary_range_name = var.cluster_secondary_range_name`
`66`	`74`	`services_secondary_range_name = var.services_secondary_range_name`
`@@ -94,6 +102,9 @@ resource "google_container_node_pool" "gke_nodes" {`
`94`	`102`	`workload_metadata_config {`
`95`	`103`	`mode = "GKE_METADATA_SERVER"`
`96`	`104`	`}`
	`105`	`+ labels = {`
	`106`	`+ "env" = "test"`
	`107`	`+ }`
`97`	`108`	`}`
`98`	`109`
`99`	`110`	`depends_on = [google_container_cluster.gke_cluster]`