feat(tf): update terraform terraform-google-modules/kubernetes-engine/google to v27

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
terraform-google-modules/kubernetes-engine/google (source)	module	major	~> 9.0 -> ~> 27.0
terraform-google-modules/kubernetes-engine/google (source)	module	major	~> v26.1.1 -> ~> 27.0.0

---

Release Notes

terraform-google-modules/terraform-google-kubernetes-engine (terraform-google-modules/kubernetes-engine/google)

v27.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>=4.32.0: Support enabling Policy Controller mutations (#​1665)

Features

• Add protect_config beta feature (#​1617) (d252579)
• cluster.tf: add support to set initial release channel version (#​1625) (e522073)
• TPG>=4.32.0: Support enabling Policy Controller mutations (#​1665) (1173518)

Bug Fixes

• extend acm wait when policy bundles are present (#​1657) (e51804e)
• set max firewall name to 36 (#​1645) (29d9259)
• update policy-essentials hash 59f4695 using ref (#​1659) (2fe1715)

v26.1.1

Compare Source

Bug Fixes

• correct TPG version constraint (#​1637) (#​1640) (14eac9f)

v26.1.0

Compare Source

Features

• Add timeouts variable for safer cluster module (#​1613) (146b2e7)

Bug Fixes

• allow ACM module to work w/o metrics sa (#​1634) (83a8be2)
• avoid TPG 4.65.0 and 4.65.1 (#​1637) (ea3e374)

v26.0.0

Compare Source

⚠ BREAKING CHANGES

• set release_channel and auto_upgrade, drop meshtelemetry (#​1618)
• kubernetes ~> 2.13: Remove 1.23 restriction on workload identity module (#​1595)
• acm: prevent conflicts in IAM binding (#​1576)

Features

• add blue/green upgrade strategy settings (#​1551) (db51271)
• add enable_private_nodes options to node_pool network_config (#​1604) (48d7590)
• allow setting network tags on autopilot clusters (#​1572) (23e9c96)
• Workload Identity module, to bind roles in various projects for the service account created (#​1574) (53f0f58)

Bug Fixes

• acm: prevent conflicts in IAM binding (#​1576) (a7cfe92)
• Autopilot vertical pod autoscaling (#​1564) (6853c61)
• fixes for tflint and dev-tools 1.10 (#​1598) (d012313)
• kubernetes ~> 2.13: Remove 1.23 restriction on workload identity module (#​1595) (b23bc86)
• node_metadata mapping for GCE_METADATA (#​1542) (#​1543) (b03ea84)
• nodepool autoscaling vars avail in GKE 1.24.1 result in conflicts. Preserve default behavior (#​1562) (98e8dc3)
• PSP removed in GKE >= 1.25.0 (#​1622) (530f16b)
• set release_channel and auto_upgrade, drop meshtelemetry (#​1618) (3c8dd3a)
• use provided service_account_name if available (#​1610) (a42ed88)

v25.0.0

Compare Source

⚠ BREAKING CHANGES

• Promote node sysctl config to GA (#​1536)
• enable auto repair and upgrade with cluster autoscaling (#​1530)
• support for gateway api for safer cluster variants (#​1523)
• promote gke_backup_agent_config to ga (#​1513)
• enable private nodes with specified pod ip range (#​1514)
• Promote managed_prometheus to GA (#​1505)
• support for gateway api (#​1510)
• Add option to pass resource_labels to NP (#​1508)
• promote gce_pd_csi_driver to GA (#​1509)
• Set the provided SA when creating autopilot clusters (#​1495)

Features

• add all pod_ranges to cluster firewall rules and add missing shadow rules (#​1480) (bcd5e03)
• Add option to pass resource_labels to NP (#​1508) (e7566c5)
• add support for policy bundles and metrics SA (#​1529) (0f63eab)
• promote gce_pd_csi_driver to GA (#​1509) (ac062f8)
• promote gke_backup_agent_config to ga (#​1513) (966135f)
• Promote managed_prometheus to GA (#​1505) (9c77c6c)
• Promote node sysctl config to GA (#​1536) (754f4e3)
• Set the provided SA when creating autopilot clusters (#​1495) (d122a55)
• support for gateway api (#​1510) (4181276)
• support for gateway api for safer cluster variants (#​1523) (912da8c)

Bug Fixes

• auth module avoid TPG v4.49.0 (#​1535) (95c5c11)
• auth module avoid TPG v4.50.0 (#​1541) (c3e08ea)
• avoid TGP v4.49.0 for asm (#​1537) (5d3d54e)
• enable auto repair and upgrade with cluster autoscaling (#​1530) (d59542c)
• enable private nodes with specified pod ip range (#​1514) (8190439)
• remove datapath provider from Autopilot modules (#​1556) (ea012f5)
• support custom service account for autopilot (#​1550) (52e25ab)
• Update variable validation description (#​1518) (d985879)

v24.1.0

Compare Source

Features

• Allow enabling cost management for safer_cluster module (#​1475) (8507e09)

v24.0.0

Compare Source

⚠ BREAKING CHANGES

• cost_management_config is out of beta now (#​1470)
• update variant - recreate node pools on max_pods_per_node or pod_range change (#​1464)
• expose global master access in GA modules (#​1421)
• min tpb bump for location_policy
• min TPG bump for location_policy (#​1453)
• add service_external_ips option (#​1441)
• Adding Support for Cost Allocation Feature in Beta (#​1413)
• add boot_disk_kms_key variable for node pools to GA modules (#​1371)

Features

• add boot_disk_kms_key variable for node pools to GA modules (#​1371) (d9a44c6)
• add location_policy and fix permadiff (#​1452) (aecccf0)
• add nodepool autoscaling vars avail in GKE 1.24.1 (#​1415) (f57f3ce)
• add service_external_ips option (#​1441) (e9de006)
• Add support for https_proxy parameter for the config_sync.git block (#​1457) (43bbd3c)
• Adding Support for Cost Allocation Feature in Beta (#​1413) (ba3dcd0)
• cost_management_config is out of beta now (#​1470) (10ea608)
• expose global master access in GA modules (#​1421) (4278f2c)
• Make creation of istio-system namespace optional (#​1439) (335c62a)
• update variant - recreate node pools on max_pods_per_node or pod_range change (#​1464) (b006593)

Bug Fixes

• location-policy permadrifting #​1445 (aecccf0)
• min tpb bump for location_policy (0ddd297)
• min TPG bump for location_policy (#​1453) (0ddd297)

v23.3.0

Compare Source

Features

• move vpa out of beta (df16cda)

Bug Fixes

• Exposing VPA to GA module (#​1404) (df16cda)
• incorrect node_pools variable type (#​1424) (faaee19)
• Truncating hub membership ID when greater than 63 character (#​1429) (0c5660d)
• use dynamic block for accelerators, updates for CI (#​1428) (0304a20)

v23.2.0

Compare Source

Features

• add support for provisioning windows node pools (92d7c67)
• Allow configuring cluster_autoscaling for safer cluster variants (#​1407) (a661eea)

v23.1.0

Compare Source

Features

• add enable_referential_rules variable (#​1394) (1fd7184)
• adds placement policy argument to the beta modules (#​1385) (c0f5881)
• Allow enabling GKE backup agent for safer cluster variants (#​1367) (5fb077d)
• cloud dns support for safer clusters (#​1384) (4e817be)
• enable PoCo referential_rules for ACM (#​1373) (b9287de)

v23.0.0

Compare Source

⚠ BREAKING CHANGES

• Increased minimum Google Provider version to 4.29 (#​1353)
• The new binary_authorization (#​1332) may result in the first apply after upgrading taking additional time

Features

• add module_depends_on to workload-identity (#​1341) (a6dce1a)
• promote notification config & dns to ga (#​1327) (47b5ff6)

Bug Fixes

• add depends_on to asm module google_container_cluster data resource (#​1365) (9140c60)
• change asm module depends_on method (#​1354) (300eb1f)
• new binary_authorization (#​1332) requires TPG 4.29 (#​1353) (4f0d19e)

v22.1.0

Compare Source

Features

• add gke_backup_agent_config arg (#​1316) (cff4428)
• add module_depends_on for asm sub module (#​1323) (4d526f9)
• add var and output for ACM version (#​1322) (35b2bf5)
• cloud-dns support (#​1317) (4bf0011)
• expose disable_default_snat in GA modules (#​1336) (a8ea7c7)
• promote max_pods_per_node, max_surge, and max_unavailable fields to ga (#​1318) (ed64058)

Bug Fixes

• resolve deprecation warning for binary authorization (#​1332) (f8a5cca), closes #​1331
• support explicit k8s version with unspecified release channel (#​1335) (dc1de85)

v22.0.0

Compare Source

⚠ BREAKING CHANGES

• Minimum Google/Google Beta provider versions increased to v4.25.0.
• promote Spot VM to GA (#​1294)
• support maintenance_exclusion (#​1273)

Features

• Allow enabling managed Prometheus in beta cluster submodules (#​1307) (71e7067)
• expose use_existing_context variable in WI module (#​1295) (d802e49)
• promote Spot VM to GA (#​1294) (274da2f)
• support gVNIC (#​1296) (5d6eac1)
• support maintenance_exclusion (#​1273) (425bf93)
• Support managed Prometheus for safer cluster variants (#​1311) (55faaf5)
• WorkloadIdenity allow to use k8s sa from the different project (#​1275) (4f5dded)

Bug Fixes

• Create new node pool when shielded_instance_config changes (#​1237) (a2272f0)
• support managed prometheus for autopilot (#​1310) (568c824)

v21.2.0

Compare Source

Features

• Add keeper for enable_secure_boot nodepool option for update variant. (#​1277) (a8b6f20)
• Add maintenance variables for safer cluster (#​1282) (19f59c4)
• expose timeouts (6011c80)
• Recurring maintenance window to GA (#​1262) (4bba52f)

Bug Fixes

• source node pools' auto_upgrade configuration from the GKE cluster (#​1293) (c7c9f44)

v21.1.0

Compare Source

Features

• support database encryption and google group rbac for autopilot (#​1265) (066149d)

Bug Fixes

• convert gcfs_config to dynamic block to prevent node pool recreation (81686e7)
• trim trailing dash from gcp SA name (#​1243) (aee12e7)

v21.0.0

Compare Source

⚠ BREAKING CHANGES

• update kube-dns configMap using kubernetes_config_map_v1_data (#​1214)

Features

• Add filestore_csi_driver option for safer cluster variants (#​1176) (40ef1a1)
• Add app.kubernetes.io/created-by label to CPR in ASM module (#​1190) (bbd9b77)
• Add keeper for enable_gcfs node pool option for update variants (#​1218) (f431756), closes #​1217
• Add support for image streaming/GCFS (#​1174) (3a94528)
• Add support for internal endpoint with ASM module (#​1219) (8e87308)
• Switch to native Terraform resources for hub registration and ACM (#​947) (9359961)
• update kube-dns configMap using kubernetes_config_map_v1_data (#​1214) (8547935)

Bug Fixes

• add output "service_account" to simple_zonal (9e92318)
• add provider_meta for google-beta to ASM submodule (#​1186) (9f06ef4)
• Add required kubernetes provider to ASM module (#​1221) (77d08e0)
• Apply applicable ASM_OPTS in config_map (#​1183) (79d604a)
• ASM module required TF 0.14+ (#​1209) (55a1e15)
• make GKE module cluster_name computed attribute (#​1189) (7a09acd)
• misspellings in comments and min_cpu_platform (#​1207) (7553a2b)
• Remove unnecessary auth files. (#​1231) (aa47e23)
• removed unused variable ip_source_ranges_ssh from example safer_cluster_iap_bastion (#​1199) (5197f22)
• set initial_node_count with remove_default_node_pool (#​1228) (151c8c4)
• set only one of log/mon config or service (#​1240) (2316e77)
• Use fleet_id instead of project_id for hub operations (#​1238) (a9a69ed)
• various fix to address CI issues (#​1248) (9e92318)

v20.0.0

Compare Source

⚠ BREAKING CHANGES

• Added gcp_filestore_csi_driver_config to addons config (#​1166)
• Rewrote ASM module, see the upgrade guide for details (#​1140)
• Minimum provider version increased to 4.10.

Features

• add gcp_filestore_csi_driver_config to addons config (#​1166) (a68fe69)
• Add Identity Service config to beta modules (#​1142) (6a99347)
• GKE autopilot support (#​1148) (d5ceafb)
• Rewrite ASM module (#​1140) (0d9c44e)

Bug Fixes

• Add missing type attributes to variables (#​1117) (6436339)
• ASM module rewrite improvements (#​1165) (2867162)

Miscellaneous Chores

• release 20.0.0 (7976d17)

v19.0.0

Compare Source

⚠ BREAKING CHANGES

• Change default node image from COS to COS_CONTAINERD (#​1122)
• Add spot vm support to beta clusters (#​1131)
• update TPG version constraints to 4.0 (#​1129)
• TPU firewall rule split into a separate resource

Features

• Add spot vm support to beta clusters (#​1131) (ae0d953)
• Allow datapath_provider in GA main module (#​1084) (3b5ddb9)
• Change default node image from COS to COS_CONTAINERD (#​1122) (e6b9282)
• update TPG version constraints to 4.0 (#​1129) (d494b0f)

Bug Fixes

• Allow users to specify network tags for the default node pool (#​1123) (b8b8547)
• Create separate firewall rule for egress to TPUs (#​1126) (99cfd98)
• Removed dependency to obsolete template_file by upgrading to templatefile (#​1119) (14a0536)

v18.0.0

Compare Source

⚠ BREAKING CHANGES

• safer-cluster modules now use ADVANCED_DATAPATH by default. Set datapath_provider to DATAPATH_PROVIDER_UNSPECIFIED to continue using Dataplane v1.
• Minimum beta provider version increased to v3.87.0.

Features

• Added monitoring_enabled_components and logging_enabled_components variables to beta clusters (#​1028) (9278265)
• Make auto_provisioning_defaults a non-beta feature and set min_cpu_platform for auto-provisioned node pools (#​1077) (5603718)
• Use ADVANCED_DATAPATH (aka. Dataplane V2) for safer-cluster modules (#​1085) (41a0c83)

v17.3.0

Compare Source

Features

• Add support for gpu_partition_size (#​1072) (cff1c1b)

Bug Fixes

• ignore ASM labels (#​1061) (3dea235)

v17.2.0

Compare Source

Features

• Add beta support for confidential_nodes (#​1040) (e105bb5)
• Added support for specifying min_cpu_platform in node config - … (#​1057) (23b5243)

Bug Fixes

• Document grant_registry_access for Artifact Registry (#​1044) (d3ca023)
• pass REVISION_NAME to downstream install script (#​1048) (dd410d7)
• set image_type, machine_type, and sandboxing on default node pool to comply with validation policies (#​1038) (8e92f6e)

v17.1.0

Compare Source

Features

• Add support for CPU quota configs for node pools (#​1032) (80252f3)

Bug Fixes

• add missing required_providers on workload identity module (#​1035) (04f7502)
• adds metadata to the default node pool (#​1018) ([660ddc9](https://www.github.com/terraform-google-modules/t

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

🎉 This PR is included in version 14.4.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀