Added mesh_certificates setting in GKE cluster.

GoogleCloudPlatform · Feb 2, 2023 · 68a552a · 68a552a
1 parent a046f28
commit 68a552a
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/modules/gke-cluster/main.tf b/modules/gke-cluster/main.tf
@@ -262,6 +262,13 @@ resource "google_container_cluster" "cluster" {
     }
   }
 
+  dynamic "mesh_certificates" {
+    for_each = var.enable_features.mesh_certificates != null ? [""] : []
+    content {
+      enable_certificates = var.enable_features.mesh_certificates
+    }
+  }
+
   dynamic "monitoring_config" {
     for_each = var.monitoring_config != null && !var.enable_features.autopilot ? [""] : []
     content {

diff --git a/modules/gke-cluster/variables.tf b/modules/gke-cluster/variables.tf
@@ -84,6 +84,7 @@ variable "enable_features" {
     groups_for_rbac      = optional(string)
     intranode_visibility = optional(bool, false)
     l4_ilb_subsetting    = optional(bool, false)
+    mesh_certificates    = optional(bool)
     pod_security_policy  = optional(bool, false)
     resource_usage_export = optional(object({
       dataset                              = string
@@ -232,4 +233,4 @@ variable "vpc_config" {
     master_authorized_ranges = optional(map(string))
   })
   nullable = false
-}
+}