module "network" {
  source = "github.com/gruntwork-io/terraform-google-network.git//modules/vpc-network?ref=v0.4.0"
  name_prefix = "management"
  project = var.project
  region = var.region
  cidr_block = "10.100.0.0/16"
  secondary_cidr_block = "10.101.0.0/16"
}


module "gke_cluster" {

  source = "github.com/gruntwork-io/terraform-google-gke.git//modules/gke-cluster?ref=v0.4.3"

  name = "management"

  project  = var.project
  location = var.region
  network  = module.network.network
  subnetwork = module.network.public_subnetwork

  master_ipv4_cidr_block = "10.102.0.0/28"

  enable_private_nodes = "true"

  # To make testing easier, we keep the public endpoint available. In production, we highly recommend restricting access to only within the network boundary, requiring your users to use a bastion host or VPN.
  disable_public_endpoint = "true"

  # With a private cluster, it is highly recommended to restrict access to the cluster master
  # However, for testing purposes we will allow all inbound traffic.
  master_authorized_networks_config = [
    {
      cidr_blocks = [
        {
          cidr_block   = "10.100.0.0/16"
          display_name = "management 1"
        },
        {
          cidr_block   = "10.101.0.0/16"
          display_name = "management 2"
        },
        {
          cidr_block   = "10.11.0.0/24"
          display_name = "home vpn"
        },
      ]
    },
  ]

  cluster_secondary_range_name = module.network.public_subnetwork_secondary_range_name

  enable_vertical_pod_autoscaling = "true"
}

# ---------------------------------------------------------------------------------------------------------------------
# CREATE A NODE POOL
# ---------------------------------------------------------------------------------------------------------------------

resource "google_container_node_pool" "node_pool" {
  provider = google-beta

  name     = "pool"
  project  = var.project
  location = var.region
  cluster  = module.gke_cluster.name

  initial_node_count = "1"

  autoscaling {
    min_node_count = "1"
    max_node_count = "5"
  }

  management {
    auto_repair  = "true"
    auto_upgrade = "true"
  }

  node_config {
    image_type   = "COS"
    machine_type = "n1-standard-1"

    labels = {
      private-pools-example = "true"
    }

    tags = [
      module.network.public,
    ]

    disk_size_gb = "30"
    disk_type    = "pd-standard"
    preemptible  = false

    service_account = module.gke_service_account.email

    oauth_scopes = [
      "https://www.googleapis.com/auth/cloud-platform",
    ]
  }

  lifecycle {
    ignore_changes = [initial_node_count]
  }

  timeouts {
    create = "30m"
    update = "30m"
    delete = "30m"
  }
}

# ---------------------------------------------------------------------------------------------------------------------
# CREATE A CUSTOM SERVICE ACCOUNT TO USE WITH THE GKE CLUSTER
# ---------------------------------------------------------------------------------------------------------------------

module "gke_service_account" {
  source = "github.com/gruntwork-io/terraform-google-gke.git//modules/gke-service-account?ref=v0.4.3"

  name        = "management-gke"
  project     = var.project
  description = "Management GKE"
}

var.location
  The location (region or zone) of the GKE cluster.

  Enter a value: us-east4

var.project
  The project ID where all resources will be launched.

  Enter a value: be-my-player-two

var.region
  The region for the network. If the cluster is regional, this must be the same region. Otherwise, it should be the region of the zone.

  Enter a value: us-east4


Error: Incorrect attribute value type

  on modules\gke-cluster\main.tf line 51, in resource "google_container_cluster" "cluster":
  51:       disabled = "${var.http_load_balancing ? 0 : 1}"

Inappropriate value for attribute "disabled": bool required.


Error: Incorrect attribute value type

  on modules\gke-cluster\main.tf line 55, in resource "google_container_cluster" "cluster":
  55:       disabled = "${var.horizontal_pod_autoscaling ? 0 : 1}"

Inappropriate value for attribute "disabled": bool required.


Error: Incorrect attribute value type

  on modules\gke-cluster\main.tf line 59, in resource "google_container_cluster" "cluster":
  59:       disabled = "${var.enable_kubernetes_dashboard ? 0 : 1}"

Inappropriate value for attribute "disabled": bool required.


Error: Incorrect attribute value type

  on modules\gke-cluster\main.tf line 63, in resource "google_container_cluster" "cluster":
  63:       disabled = "${var.enable_network_policy ? 0 : 1}"

Inappropriate value for attribute "disabled": bool required.


Error: Unsupported argument

  on modules\gke-cluster\main.tf line 83, in resource "google_container_cluster" "cluster":
  83:   master_authorized_networks_config = "${var.master_authorized_networks_config}"

An argument named "master_authorized_networks_config" is not expected here.
Did you mean to define a block of type "master_authorized_networks_config"?

module.gke_cluster.google_container_cluster.cluster: Resource 'data.google_compute_subnetwork.gke_subnetwork' does not have attribute 'self_link' for variable 'data.google_compute_subnetwork.gke_subnetwork.self_link'

project = "my-team"
location = "europe-west2-a"
region = "europe-west2"
cluster_name = "my-dev1"
cluster_service_account_name = "my-dev1-sa"
cluster_service_account_description = "GKE Cluster Service Account managed by Terraform"
kubectl_config_path = "$HOME/.kube/config"
tls_subject = {
  common_name = "tiller"
  org         = "Me"
  org_unit    = "My Team"
  city        = "Dublin"
  country     = "Ireland"
}
client_tls_subject = {
  common_name = "admin"
  org         = "Me"
  org_unit    = "My Team"
  city        = "Dublin"
  country     = "Ireland"
}

google_container_node_pool.node_pool: Creation complete after 5m46s [id=europe-west2-a/my-dev1/private-pool]
null_resource.configure_kubectl: Creating...
null_resource.configure_kubectl: Provisioning with 'local-exec'...
null_resource.configure_kubectl (local-exec): Executing: ["cmd" "/C" "gcloud beta container clusters get-credentials my-dev1 --region europe-west2 --project my-team"]
null_resource.configure_kubectl (local-exec): Fetching cluster endpoint and auth data.
null_resource.configure_kubectl (local-exec): ERROR: (gcloud.beta.container.clusters.get-credentials) ResponseError: code=404, message=Not found: projects/my-team/locations/europe-west2/clusters/my-dev1.
null_resource.configure_kubectl (local-exec): Could not find [my-dev1] in [europe-west2].
null_resource.configure_kubectl (local-exec): Did you mean [my-dev1] in [europe-west2-a]?


Error: Error running command 'gcloud beta container clusters get-credentials my-dev1 --region europe-west2 --project my-team': exit status 1. Output: Fetching cluster endpoint and auth data.
ERROR: (gcloud.beta.container.clusters.get-credentials) ResponseError: code=404, message=Not found: projects/my-team/locations/europe-west2/clusters/my-dev1.
Could not find [my-dev1] in [europe-west2].
Did you mean [my-dev1] in [europe-west2-a]?




Error: Error running command 'kubergrunt tls gen --ca --namespace kube-system --secret-name kube-system-namespace-tiller-ca-certs --secret-label gruntwork.io/tiller-namespace=kube-system --secret-label gruntwork.io/tiller-credentials=true --secret-label gruntwork.io/tiller-credentials-type=ca --tls-subject-json '{"city":"Dublin","common_name":"tiller","country":"Ireland","org":"Me","org_unit":"My Team"}' --tls-private-key-algorithm ECDSA --tls-private-key-ecdsa-curve P256 --kubectl-server-endpoint "$KUBECTL_SERVER_ENDPOINT" --kubectl-certificate-authority "$KUBECTL_CA_DATA" --kubectl-token "$KUBECTL_TOKEN"

kubergrunt tls gen --namespace kube-system --ca-secret-name kube-system-namespace-tiller-ca-certs --ca-namespace kube-system --secret-name tiller-certs --secret-label gruntwork.io/tiller-namespace=kube-system --secret-label gruntwork.io/tiller-credentials=true --secret-label gruntwork.io/tiller-credentials-type=server --tls-subject-json '{"city":"Dublin","common_name":"tiller","country":"Ireland","org":"Me","org_unit":"My Team"}' --tls-private-key-algorithm ECDSA --tls-private-key-ecdsa-curve P256 --kubectl-server-endpoint "$KUBECTL_SERVER_ENDPOINT" --kubectl-certificate-authority "$KUBECTL_CA_DATA" --kubectl-token "$KUBECTL_TOKEN"
': exit status 1. Output: time="2019-08-06T14:34:36+01:00" level=info msg="No context name provided. Using default." name=kubergrunt
time="2019-08-06T14:34:36+01:00" level=info msg="No kube config path provided. Using default (C:\\Users\\me\\.kube\\config)" name=kubergrunt
ERROR: invalid character '\'' looking for beginning of value

+ ip_allocation_policy {
          + cluster_ipv4_cidr_block       = (known after apply)
          + cluster_secondary_range_name  = "public-services"
          + services_ipv4_cidr_block      = (known after apply)
          + services_secondary_range_name = "public-services"
        }

Initializing modules...
- gke_cluster in modules\gke-cluster
- gke_service_account in modules\gke-service-account
Downloading git::[email protected]:gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0 for tiller...
Downloading git::[email protected]:gruntwork-io/terraform-google-network.git?ref=v0.1.0 for vpc_network...

Error: Failed to download module

Could not download module "tiller" (main.tf:311) source code from
"git::[email protected]:gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0":
error downloading
'ssh://[email protected]/gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0':
C:\Program Files\Git\cmd\git.exe exited with 128: Cloning into
'.terraform\modules\tiller'...
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.



Error: Failed to download module

Could not download module "vpc_network" (main.tf:209) source code from
"git::[email protected]:gruntwork-io/terraform-google-network.git?ref=v0.1.0":
error downloading
'ssh://[email protected]/gruntwork-io/terraform-google-network.git?ref=v0.1.0':
C:\Program Files\Git\cmd\git.exe exited with 128: Cloning into
'.terraform\modules\vpc_network'...
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.



Error: Failed to download module

Could not download module "tiller" (main.tf:311) source code from
"git::[email protected]:gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0":
error downloading
'ssh://[email protected]/gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0':
C:\Program Files\Git\cmd\git.exe exited with 128: Cloning into
'.terraform\modules\tiller'...
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.



Error: Failed to download module

Could not download module "tiller" (main.tf:311) source code from
"git::[email protected]:gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0":
error downloading
'ssh://[email protected]/gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0':
C:\Program Files\Git\cmd\git.exe exited with 128: Cloning into
'.terraform\modules\tiller'...
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.



c:\bemyplayertwo\terraform\prod-test\terraform-google-gke>terraform init
Initializing modules...
Downloading git::[email protected]:gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0 for tiller...
Downloading git::[email protected]:gruntwork-io/terraform-google-network.git?ref=v0.1.0 for vpc_network...

Error: Failed to download module

Could not download module "tiller" (main.tf:311) source code from
"git::[email protected]:gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0":
error downloading
'ssh://[email protected]/gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0':
C:\Program Files\Git\cmd\git.exe exited with 128: Cloning into
'.terraform\modules\tiller'...
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.



Error: Failed to download module

Could not download module "vpc_network" (main.tf:209) source code from
"git::[email protected]:gruntwork-io/terraform-google-network.git?ref=v0.1.0":
error downloading
'ssh://[email protected]/gruntwork-io/terraform-google-network.git?ref=v0.1.0':
C:\Program Files\Git\cmd\git.exe exited with 128: Cloning into
'.terraform\modules\vpc_network'...
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.



Error: Failed to download module

Could not download module "tiller" (main.tf:311) source code from
"git::[email protected]:gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0":
error downloading
'ssh://[email protected]/gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0':
C:\Program Files\Git\cmd\git.exe exited with 128: Cloning into
'.terraform\modules\tiller'...
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.



Error: Failed to download module

Could not download module "tiller" (main.tf:311) source code from
"git::[email protected]:gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0":
error downloading
'ssh://[email protected]/gruntwork-io/terraform-kubernetes-helm.git?ref=v0.3.0':
C:\Program Files\Git\cmd\git.exe exited with 128: Cloning into
'.terraform\modules\tiller'...
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.



Error: Failed to download module

Could not download module "vpc_network" (main.tf:209) source code from
"git::[email protected]:gruntwork-io/terraform-google-network.git?ref=v0.1.0":
error downloading
'ssh://[email protected]/gruntwork-io/terraform-google-network.git?ref=v0.1.0':
C:\Program Files\Git\cmd\git.exe exited with 128: Cloning into
'.terraform\modules\vpc_network'...
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

  provider = google-beta

  name     = "private-pool"
  project  = var.project
  location = var.location
  cluster  = module.gke_cluster.name

  initial_node_count = var.cluster_nodepool_min_nodes

  autoscaling {
    min_node_count = var.cluster_nodepool_min_nodes
    max_node_count = var.cluster_nodepool_max_nodes
  }

  management {
    auto_repair  = "true"
    auto_upgrade = "true"
  }

  node_config {
    image_type   = "COS"
    machine_type = var.cluster_nodepool_machine_type

    labels = {
      private-pools-example = "true"
    }

    # Add a private tag to the instances. See the network access tier table for full details:
    # https://github.com/gruntwork-io/terraform-google-network/tree/master/modules/vpc-network#access-tier
    tags = [
      module.vpc_network.private,
      "private-pool-example",
    ]

    disk_size_gb = "30"
    disk_type    = "pd-standard"
    preemptible  = false

    service_account = module.gke_service_account.email

    oauth_scopes = [
      "https://www.googleapis.com/auth/cloud-platform",
    ]
  }

  lifecycle {
    ignore_changes = [initial_node_count]
  }

  timeouts {
    create = "30m"
    update = "30m"
    delete = "30m"
  }
}

  + resource "google_container_node_pool" "node_pool" {
      + cluster             = "web-cluster"
      + id                  = (known after apply)
      + initial_node_count  = 2
      + instance_group_urls = (known after apply)
      + location            = "europe-west1"
      + max_pods_per_node   = (known after apply)
      + name                = "private-pool"
      + name_prefix         = (known after apply)
      + node_count          = (known after apply)
      + node_locations      = (known after apply)
      + project             = "redacted-web"
      + region              = (known after apply)
      + version             = (known after apply)
      + zone                = (known after apply)
      + autoscaling {
          + max_node_count = 2
          + min_node_count = 2
        }
      + management {
          + auto_repair  = true
          + auto_upgrade = true
        }
      + node_config {
          + disk_size_gb      = 30
          + disk_type         = "pd-standard"
          + guest_accelerator = (known after apply)
          + image_type        = "COS"
          + labels            = {
              + "private-pools-example" = "true"
            }
          + local_ssd_count   = (known after apply)
          + machine_type      = "n1-highmem-16"
          + metadata          = (known after apply)
          + oauth_scopes      = [
              + "https://www.googleapis.com/auth/cloud-platform",
            ]
          + preemptible       = false
          + service_account   = "[email protected]"
          + tags              = [
              + "private",
              + "private-pool-example",
            ]
          + shielded_instance_config {
              + enable_integrity_monitoring = (known after apply)
              + enable_secure_boot          = (known after apply)
            }
        }
      + timeouts {
          + create = "30m"
          + delete = "30m"
          + update = "30m"
        }
    }

  on ../modules/gke-cluster/main.tf line 49, in resource "google_container_node_pool" "node_pool":
  49: resource "google_container_node_pool" "node_pool" {

│ Error: Insufficient client_certificate_config blocks
│ 
│   on .terraform/modules/gke_cluster/modules/gke-cluster/main.tf line 107, in resource "google_container_cluster" "cluster":
│  107:   master_auth {
│ 
│ At least 1 "client_certificate_config" blocks are required.
╷
│ Error: Unsupported argument
│ 
│   on .terraform/modules/gke_cluster/modules/gke-cluster/main.tf line 108, in resource "google_container_cluster" "cluster":
│  108:     username = var.basic_auth_username
│ 
│ An argument named "username" is not expected here.
╵
╷
│ Error: Unsupported argument
│ 
│   on .terraform/modules/gke_cluster/modules/gke-cluster/main.tf line 109, in resource "google_container_cluster" "cluster":
│  109:     password = var.basic_auth_password
│ 
│ An argument named "password" is not expected here.

  # module.gke_cluster.google_container_cluster.cluster must be replaced
-/+ resource "google_container_cluster" "cluster" {
      ~ additional_zones            = [] -> (known after apply)
      ~ cluster_autoscaling         = [] -> (known after apply)
      ~ cluster_ipv4_cidr           = "10.4.0.0/16" -> (known after apply)
        description                 = "GKE cluster for mgmt environment"
      + enable_binary_authorization = (known after apply)
        enable_kubernetes_alpha     = false
        enable_legacy_abac          = false
      + enable_tpu                  = (known after apply)
      ~ endpoint                    = "{redacted}" -> (known after apply)
      ~ id                          = "{redacted}" -> (known after apply)
        initial_node_count          = 1
      ~ instance_group_urls         = [
          - "https://www.googleapis.com/compute/v1/projects/{redacted}/zones/us-west1-c/instanceGroups/gke-{redacted}-private-pool-4aab0243-grp",
        ] -> (known after apply)
      ~ ip_allocation_policy        = [
          ~ {
              ~ cluster_ipv4_cidr_block       = "10.4.0.0/16" -> (known after apply)
                cluster_secondary_range_name  = "public-services"
              ~ create_subnetwork             = false -> null
              ~ node_ipv4_cidr_block          = "10.0.0.0/16" -> (known after apply)
              ~ services_ipv4_cidr_block      = "10.4.0.0/16" -> (known after apply)
                services_secondary_range_name = "public-services"
              ~ subnetwork_name               = "" -> null
                use_ip_aliases                = true
            },
        ]
        location                    = "us-west1-c"
        logging_service             = "logging.googleapis.com/kubernetes"
      ~ master_version              = "1.13.7-gke.24" -> (known after apply)
        min_master_version          = "1.13.7-gke.24"
        monitoring_service          = "monitoring.googleapis.com/kubernetes"
        name                        = "{redacted}"
      ~ network                     = "projects/{redacted}/global/networks/mgmt-network" -> "https://www.googleapis.com/compute/v1/{redacted}/global/networks/mgmt-network"
      ~ node_locations              = [] -> (known after apply)
      ~ node_version                = "1.13.7-gke.24" -> (known after apply)
        project                     = "{redacted}"
      + region                      = (known after apply)
        remove_default_node_pool    = true
      - resource_labels             = {} -> null
      ~ subnetwork                  = "projects/{redacted}/regions/us-west1/subnetworks/mgmt-subnetwork-public" -> "https://www.googleapis.com/compute/v1/projects/{redacted}/regions/us-west1/subnetworks/mgmt-subnetwork-public"
      ~ zone                        = "us-west1-c" -> (known after apply)

        addons_config {
            horizontal_pod_autoscaling {
                disabled = false
            }

            http_load_balancing {
                disabled = false
            }

            kubernetes_dashboard {
                disabled = true
            }

            network_policy_config {
                disabled = false
            }
        }

      ~ maintenance_policy {
          ~ daily_maintenance_window {
              ~ duration   = "PT4H0M0S" -> (known after apply)
                start_time = "05:00"
            }
        }

      ~ master_auth {
          + client_certificate     = (known after apply)
          + client_key             = (sensitive value)
          ~ cluster_ca_certificate = "{redacted}" -> (known after apply)

            client_certificate_config {
                issue_client_certificate = false
            }
        }

        master_authorized_networks_config {
            cidr_blocks {
                cidr_block   = "0.0.0.0/0"
                display_name = "all-for-testing"
            }
        }

        network_policy {
            enabled  = true
            provider = "CALICO"
        }

      ~ node_config {
          ~ disk_size_gb      = 10 -> (known after apply)
          ~ disk_type         = "pd-standard" -> (known after apply)
          ~ guest_accelerator = [] -> (known after apply)
          ~ image_type        = "COS" -> (known after apply)
          - labels            = {
              - "private-pool-example" = "true"
            } -> null # forces replacement
          ~ local_ssd_count   = 0 -> (known after apply)
          ~ machine_type      = "n1-standard-1" -> (known after apply)
          ~ metadata          = {
              - "disable-legacy-endpoints" = "true"
            } -> (known after apply)
          ~ oauth_scopes      = [
              - "https://www.googleapis.com/auth/cloud-platform",
            ] -> (known after apply)
            preemptible       = false
            service_account   = "{redacted}@{redacted}.iam.gserviceaccount.com"
          - tags              = [
              - "private",
              - "private-pool-example",
            ] -> null # forces replacement
        }

      ~ node_pool {
          ~ initial_node_count  = 1 -> (known after apply)
          ~ instance_group_urls = [
              - "https://www.googleapis.com/compute/v1/projects/{redacted}/zones/us-west1-c/instanceGroupManagers/gke-{redacted}-private-pool-4aab0243-grp",
            ] -> (known after apply)
          ~ max_pods_per_node   = 0 -> (known after apply)
          ~ name                = "private-pool" -> (known after apply)
          + name_prefix         = (known after apply)
          ~ node_count          = 1 -> (known after apply)
          ~ version             = "1.13.7-gke.24" -> (known after apply)

          ~ autoscaling {
              ~ max_node_count = 5 -> (known after apply)
              ~ min_node_count = 1 -> (known after apply)
            }

          ~ management {
              ~ auto_repair  = true -> (known after apply)
              ~ auto_upgrade = true -> (known after apply)
            }

          ~ node_config {
              ~ disk_size_gb      = 10 -> (known after apply)
              ~ disk_type         = "pd-standard" -> (known after apply)
              ~ guest_accelerator = [] -> (known after apply)
              ~ image_type        = "COS" -> (known after apply)
              ~ labels            = {
                  - "private-pool-example" = "true"
                } -> (known after apply)
              ~ local_ssd_count   = 0 -> (known after apply)
              ~ machine_type      = "n1-standard-1" -> (known after apply)
              ~ metadata          = {
                  - "disable-legacy-endpoints" = "true"
                } -> (known after apply)
              + min_cpu_platform  = (known after apply)
              ~ oauth_scopes      = [
                  - "https://www.googleapis.com/auth/cloud-platform",
                ] -> (known after apply)
              ~ preemptible       = false -> (known after apply)
              ~ service_account   = "{redacted}@{redacted}.iam.gserviceaccount.com" -> (known after apply)
              ~ tags              = [
                  - "private",
                  - "private-pool-example",
                ] -> (known after apply)

              + taint {
                  + effect = (known after apply)
                  + key    = (known after apply)
                  + value  = (known after apply)
                }

              + workload_metadata_config {
                  + node_metadata = (known after apply)
                }
            }
        }

      ~ private_cluster_config {
          - enable_private_endpoint = false -> null
            enable_private_nodes    = true
            master_ipv4_cidr_block  = "10.2.255.0/28"
          ~ private_endpoint        = "10.2.255.2" -> (known after apply)
          ~ public_endpoint         = "{redacted}" -> (known after apply)
        }
    }

Plan: 1 to add, 0 to change, 0 to destroy.
google_container_node_pool.node_pool: Creating...
╷
│ Error: error creating NodePool: googleapi: Error 400: Creation of node pools using node images based on Docker container runtimes is not supported in GKE v1.24+ clusters as Dockershim has been removed in Kubernetes v1.24., badRequest
│
│   with google_container_node_pool.node_pool,
│   on main.tf line 93, in resource "google_container_node_pool" "node_pool":
│   93: resource "google_container_node_pool" "node_pool" {
│
╵
❯

Error: Error creating Network: googleapi: Error 403: Required 'compute.networks.create' permission for 'projects/my-proj/global/networks/cluster-dev1-network-yl0n-network', forbidden

  on .terraform\modules\vpc_network\modules\vpc-network\main.tf line 12, in resource "google_compute_network" "vpc":
  12: resource "google_compute_network" "vpc" {

$ terraform version
Terraform v0.12.5
+ provider.external v1.2.0
+ provider.google v2.7.0
+ provider.google-beta v2.7.0
+ provider.helm v0.10.0
+ provider.kubernetes v1.7.0
+ provider.null v2.1.2
+ provider.random v2.1.2
+ provider.template v2.1.2
+ provider.tls v2.0.1

module "gke_service_account" {
  # When using these modules in your own templates, you will need to use a Git URL with a ref attribute that pins you
  # to a specific version of the modules, such as the following example:
  source = "github.com/gruntwork-io/terraform-google-gke.git//modules/gke-service-account?ref=v0.2.0"
  #source = "../../modules/gke-service-account"


  name        = var.cluster_service_account_name
  project     = var.project
  description = var.cluster_service_account_description
}

module "gke_cluster" {
  # When using these modules in your own templates, you will need to use a Git URL with a ref attribute that pins you
  # to a specific version of the modules, such as the following example:
  source = "github.com/gruntwork-io/terraform-google-gke.git//modules/gke-cluster?ref=v0.2.0"
  #source = "../../modules/gke-cluster"

  name = var.cluster_name

Error: Incorrect attribute value type

  on .terraform/modules/gke_cluster/modules/gke-cluster/main.tf line 51, in resource "google_container_cluster" "cluster":
  51:       disabled = "${var.http_load_balancing ? 0 : 1}"

Inappropriate value for attribute "disabled": bool required.


Error: Incorrect attribute value type

  on .terraform/modules/gke_cluster/modules/gke-cluster/main.tf line 55, in resource "google_container_cluster" "cluster":
  55:       disabled = "${var.horizontal_pod_autoscaling ? 0 : 1}"

Inappropriate value for attribute "disabled": bool required.


Error: Incorrect attribute value type

  on .terraform/modules/gke_cluster/modules/gke-cluster/main.tf line 59, in resource "google_container_cluster" "cluster":
  59:       disabled = "${var.enable_kubernetes_dashboard ? 0 : 1}"

Inappropriate value for attribute "disabled": bool required.


Error: Incorrect attribute value type

  on .terraform/modules/gke_cluster/modules/gke-cluster/main.tf line 63, in resource "google_container_cluster" "cluster":
  63:       disabled = "${var.enable_network_policy ? 0 : 1}"

Inappropriate value for attribute "disabled": bool required.


Error: Unsupported argument

  on .terraform/modules/gke_cluster/modules/gke-cluster/main.tf line 83, in resource "google_container_cluster" "cluster":
  83:   master_authorized_networks_config = "${var.master_authorized_networks_config}"

An argument named "master_authorized_networks_config" is not expected here.
Did you mean to define a block of type "master_authorized_networks_config"?

Terraform v0.12.12
+ provider.google v2.9.1
+ provider.google-beta v2.9.1
+ provider.random v2.2.1

module "gke_cluster" {
  ...
  enable_legacy_abac = "true"
}

  # module.gke_cluster.google_container_cluster.cluster will be created
  + resource "google_container_cluster" "cluster" {
      ...
      + enable_legacy_abac          = true

  # module.gke_cluster.google_container_cluster.cluster will be created
  + resource "google_container_cluster" "cluster" {
      ...
      + enable_legacy_abac          = false

resource "google_container_cluster" "cluster" {
  enable_legacy_abac = var.enable_legacy_abac
  ...
}

Error: googleapi: Error 400: Alias IP addresses are required for private cluster, please make sure you enable alias IPs when creating a cluster., badRequest

  on modules/gke-cluster/main.tf line 20, in resource "google_container_cluster" "cluster":
  20: resource "google_container_cluster" "cluster" {

  autoscaling {
    min_node_count = "1"
    max_node_count = "5"
  }

  autoscaling {
    min_node_count = var.autoscaling_min_node_count
    max_node_count = var.autoscaling_max_node_count
  }