Autopilot Support

[cmcga1125]

So, when can we expect to see some Autopilot Enabled Cluster Terraform :)

[cmcga1125]

FWIW: i went digging around this morning the GCP provider and i don't see it mentioned anywhere, but did find this related issue:
hashicorp/terraform-provider-google#8553

[hcharley]

Note that upstream of the GCP provider is the GCP Go library. It was just updated:

hashicorp/terraform-provider-google#8553 (comment)

[cmcga1125]

anyone watching this, i was able to manually click a cluster into existence, then use a data object to let us start using it. like this:

data "google_container_cluster" "gke" {
  name     = local.cluster_name
  location = local.region
  project = local.project_id
}
data "google_client_config" "default" {
}
provider "kubernetes" {
  # load_config_file       = false
  host                   = "https://${data.google_container_cluster.gke.private_cluster_config.0.public_endpoint}"
  token                  = data.google_client_config.default.access_token
  cluster_ca_certificate = base64decode(data.google_container_cluster.gke.master_auth.0.cluster_ca_certificate)
}

[paulwilljones]

hashicorp/terraform-provider-google#8632

[cmcga1125]

i'll take a stab at updating the modules here :)

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days

[groksrc]

FWIW, it looks like when you enable autopilot with the enable_autopilot it prevents you from being able to specify a custom service account. To me that's a bit of a blocker.

[BenCoughlan15]

FWIW, it looks like when you enable autopilot with the enable_autopilot it prevents you from being able to specify a custom service account. To me that's a bit of a blocker.

Have you tried using workload identity, and SA's per service?

[dahlmo]

Seems support for this was added in v3.63.0?

https://github.com/hashicorp/terraform-provider-google/releases/tag/v3.63.0

[cvega77]

FWIW, it looks like when you enable autopilot with the enable_autopilot it prevents you from being able to specify a custom service account. To me that's a bit of a blocker.

There is a bug open for this: hashicorp/terraform-provider-google#9505 but it seems that hasn't been updated in a while.

[cmcga1125]

This is live!