{"id":22096893,"url":"https://github.com/streamnative/terraform-google-cloud","last_synced_at":"2026-02-08T11:33:14.437Z","repository":{"id":64971257,"uuid":"390052744","full_name":"streamnative/terraform-google-cloud","owner":"streamnative","description":"Terraform modules for provisioning StreamNative Cloud on google cloud","archived":false,"fork":false,"pushed_at":"2024-12-17T14:23:16.000Z","size":187,"stargazers_count":2,"open_issues_count":3,"forks_count":0,"subscribers_count":6,"default_branch":"master","last_synced_at":"2024-12-24T21:33:52.515Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/streamnative.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-07-27T16:27:33.000Z","updated_at":"2024-12-17T14:23:19.000Z","dependencies_parsed_at":"2025-01-16T10:51:48.282Z","dependency_job_id":null,"html_url":"https://github.com/streamnative/terraform-google-cloud","commit_stats":null,"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/streamnative%2Fterraform-google-cloud","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/streamnative%2Fterraform-google-cloud/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/streamnative%2Fterraform-google-cloud/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/streamnative%2Fterraform-google-cloud/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/streamnative","download_url":"https://codeload.github.com/streamnative/terraform-google-cloud/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248127709,"owners_count":21052266,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-12-01T04:13:09.097Z","updated_at":"2026-02-08T11:33:14.424Z","avatar_url":"https://github.com/streamnative.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003c!--\n  Copyright 2023 StreamNative, Inc.\n  \n  Licensed under the Apache License, Version 2.0 (the \"License\");\n  you may not use this file except in compliance with the License.\n  You may obtain a copy of the License at\n  \n      http://www.apache.org/licenses/LICENSE-2.0\n  \n  Unless required by applicable law or agreed to in writing, software\n  distributed under the License is distributed on an \"AS IS\" BASIS,\n  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n  See the License for the specific language governing permissions and\n  limitations under the License.\n--\u003e\n\n# terraform-google-cloud\n\nAn example configuration is found in [examples/root_example/main.tf](./examples/root_example/main.tf).\n\nAssuming you have the GCloud CLI installed and configured, to the example, run\n\n```\ntf apply --target module.sn_cluster\ntf apply\n```\n\n\u003c!-- BEGIN_TF_DOCS --\u003e\n## Requirements\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"requirement_terraform\"\u003e\u003c/a\u003e [terraform](#requirement\\_terraform) | \u003e=1.3.0 |\n| \u003ca name=\"requirement_google\"\u003e\u003c/a\u003e [google](#requirement\\_google) | \u003e= 5.40.0, \u003c 7 |\n| \u003ca name=\"requirement_kubernetes\"\u003e\u003c/a\u003e [kubernetes](#requirement\\_kubernetes) | ~\u003e 2.10 |\n| \u003ca name=\"requirement_random\"\u003e\u003c/a\u003e [random](#requirement\\_random) | \u003e= 2.1 |\n\n## Providers\n\n| Name | Version |\n|------|---------|\n| \u003ca name=\"provider_google\"\u003e\u003c/a\u003e [google](#provider\\_google) | 5.45.0 |\n| \u003ca name=\"provider_kubernetes\"\u003e\u003c/a\u003e [kubernetes](#provider\\_kubernetes) | 2.35.1 |\n\n## Modules\n\n| Name | Source | Version |\n|------|--------|---------|\n| \u003ca name=\"module_gke\"\u003e\u003c/a\u003e [gke](#module\\_gke) | terraform-google-modules/kubernetes-engine/google | 35.0.1 |\n| \u003ca name=\"module_gke_private\"\u003e\u003c/a\u003e [gke\\_private](#module\\_gke\\_private) | terraform-google-modules/kubernetes-engine/google//modules/private-cluster | 35.0.1 |\n\n## Resources\n\n| Name | Type |\n|------|------|\n| [google_kms_crypto_key.gke_encryption_key](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/kms_crypto_key) | resource |\n| [google_kms_key_ring.keyring](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/kms_key_ring) | resource |\n| [google_project_iam_member.kms_iam_binding](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/project_iam_member) | resource |\n| [kubernetes_namespace.sn_system](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/namespace) | resource |\n| [kubernetes_storage_class.sn_default](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/storage_class) | resource |\n| [kubernetes_storage_class.sn_ssd](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/storage_class) | resource |\n| [google_compute_zones.available](https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/compute_zones) | data source |\n| [google_project.project](https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/project) | data source |\n\n## Inputs\n\n| Name | Description | Type | Default | Required |\n|------|-------------|------|---------|:--------:|\n| \u003ca name=\"input_add_cluster_firewall_rules\"\u003e\u003c/a\u003e [add\\_cluster\\_firewall\\_rules](#input\\_add\\_cluster\\_firewall\\_rules) | Creates additional firewall rules on the cluster. | `bool` | `false` | no |\n| \u003ca name=\"input_add_master_webhook_firewall_rules\"\u003e\u003c/a\u003e [add\\_master\\_webhook\\_firewall\\_rules](#input\\_add\\_master\\_webhook\\_firewall\\_rules) | Create master\\_webhook firewall rules for ports defined in firewall\\_inbound\\_ports. | `bool` | `false` | no |\n| \u003ca name=\"input_add_shadow_firewall_rules\"\u003e\u003c/a\u003e [add\\_shadow\\_firewall\\_rules](#input\\_add\\_shadow\\_firewall\\_rules) | Create GKE shadow firewall (the same as default firewall rules with firewall logs enabled). | `bool` | `false` | no |\n| \u003ca name=\"input_additive_vpc_scope_dns_domain\"\u003e\u003c/a\u003e [additive\\_vpc\\_scope\\_dns\\_domain](#input\\_additive\\_vpc\\_scope\\_dns\\_domain) | This will enable Cloud DNS additive VPC scope. Must provide a domain name that is unique within the VPC. For this to work cluster\\_dns = `CLOUD_DNS` and cluster\\_dns\\_scope = `CLUSTER_SCOPE` must both be set as well. | `string` | `\"\"` | no |\n| \u003ca name=\"input_authenticator_security_group\"\u003e\u003c/a\u003e [authenticator\\_security\\_group](#input\\_authenticator\\_security\\_group) | The name of the RBAC security group for use with Google security groups in Kubernetes RBAC. Group name must be in format gke-security-groups@yourdomain.com | `string` | `null` | no |\n| \u003ca name=\"input_cluster_autoscaling_config\"\u003e\u003c/a\u003e [cluster\\_autoscaling\\_config](#input\\_cluster\\_autoscaling\\_config) | Cluster autoscaling configuration for node auto-provisioning. This is disabled for our configuration, since we typically want to scale existing node pools rather than add new ones to the cluster | \u003cpre\u003eobject({\u003cbr\u003e    enabled             = bool\u003cbr\u003e    min_cpu_cores       = number\u003cbr\u003e    max_cpu_cores       = number\u003cbr\u003e    min_memory_gb       = number\u003cbr\u003e    max_memory_gb       = number\u003cbr\u003e    gpu_resources       = list(object({ resource_type = string, minimum = number, maximum = number }))\u003cbr\u003e    auto_repair         = bool\u003cbr\u003e    auto_upgrade        = bool\u003cbr\u003e    autoscaling_profile = string\u003cbr\u003e  })\u003c/pre\u003e | \u003cpre\u003e{\u003cbr\u003e  \"auto_repair\": true,\u003cbr\u003e  \"auto_upgrade\": false,\u003cbr\u003e  \"autoscaling_profile\": \"BALANCED\",\u003cbr\u003e  \"enabled\": false,\u003cbr\u003e  \"gpu_resources\": [],\u003cbr\u003e  \"max_cpu_cores\": null,\u003cbr\u003e  \"max_memory_gb\": null,\u003cbr\u003e  \"min_cpu_cores\": null,\u003cbr\u003e  \"min_memory_gb\": null\u003cbr\u003e}\u003c/pre\u003e | no |\n| \u003ca name=\"input_cluster_dns_domain\"\u003e\u003c/a\u003e [cluster\\_dns\\_domain](#input\\_cluster\\_dns\\_domain) | The suffix used for all cluster service records. | `string` | `\"\"` | no |\n| \u003ca name=\"input_cluster_dns_provider\"\u003e\u003c/a\u003e [cluster\\_dns\\_provider](#input\\_cluster\\_dns\\_provider) | Which in-cluster DNS provider should be used. PROVIDER\\_UNSPECIFIED (default) or PLATFORM\\_DEFAULT or CLOUD\\_DNS. | `string` | `\"PROVIDER_UNSPECIFIED\"` | no |\n| \u003ca name=\"input_cluster_dns_scope\"\u003e\u003c/a\u003e [cluster\\_dns\\_scope](#input\\_cluster\\_dns\\_scope) | The scope of access to cluster DNS records. DNS\\_SCOPE\\_UNSPECIFIED (default) or CLUSTER\\_SCOPE or VPC\\_SCOPE. | `string` | `\"DNS_SCOPE_UNSPECIFIED\"` | no |\n| \u003ca name=\"input_cluster_http_load_balancing\"\u003e\u003c/a\u003e [cluster\\_http\\_load\\_balancing](#input\\_cluster\\_http\\_load\\_balancing) | Enable the HTTP load balancing addon for the cluster. Defaults to \"true\" | `bool` | `true` | no |\n| \u003ca name=\"input_cluster_name\"\u003e\u003c/a\u003e [cluster\\_name](#input\\_cluster\\_name) | The name of your GKE cluster. | `string` | n/a | yes |\n| \u003ca name=\"input_cluster_network_policy\"\u003e\u003c/a\u003e [cluster\\_network\\_policy](#input\\_cluster\\_network\\_policy) | Enable the network policy addon for the cluster. Defaults to \"true\", and uses CALICO as the provider | `bool` | `true` | no |\n| \u003ca name=\"input_create_service_account\"\u003e\u003c/a\u003e [create\\_service\\_account](#input\\_create\\_service\\_account) | Creates a service account for the cluster. Defaults to \"true\". | `bool` | `true` | no |\n| \u003ca name=\"input_database_encryption_key_name\"\u003e\u003c/a\u003e [database\\_encryption\\_key\\_name](#input\\_database\\_encryption\\_key\\_name) | Name of the KMS key to encrypt Kubernetes secrets at rest in etcd | `string` | `\"\"` | no |\n| \u003ca name=\"input_datapath_provider\"\u003e\u003c/a\u003e [datapath\\_provider](#input\\_datapath\\_provider) | the datapath provider to use, in the future, the default of this should be ADVANCED\\_DATAPATH | `string` | `\"DATAPATH_PROVIDER_UNSPECIFIED\"` | no |\n| \u003ca name=\"input_default_max_pods_per_node\"\u003e\u003c/a\u003e [default\\_max\\_pods\\_per\\_node](#input\\_default\\_max\\_pods\\_per\\_node) | the number of pods per node, defaults to GKE default of 110, but in smaller CIDRs we want to tune this | `number` | `110` | no |\n| \u003ca name=\"input_deletion_protection\"\u003e\u003c/a\u003e [deletion\\_protection](#input\\_deletion\\_protection) | Whether or not to allow Terraform to destroy the cluster. | `bool` | `true` | no |\n| \u003ca name=\"input_enable_database_encryption\"\u003e\u003c/a\u003e [enable\\_database\\_encryption](#input\\_enable\\_database\\_encryption) | Enables etcd encryption via Google KMS. | `bool` | `false` | no |\n| \u003ca name=\"input_enable_func_pool\"\u003e\u003c/a\u003e [enable\\_func\\_pool](#input\\_enable\\_func\\_pool) | Enable an additional dedicated pool for Pulsar Functions. Enabled by default. | `bool` | `true` | no |\n| \u003ca name=\"input_enable_l4_ilb_subsetting\"\u003e\u003c/a\u003e [enable\\_l4\\_ilb\\_subsetting](#input\\_enable\\_l4\\_ilb\\_subsetting) | Enable L4 ILB Subsetting on the cluster, this cannot be disabled once it has been enabled. | `bool` | `false` | no |\n| \u003ca name=\"input_enable_private_endpoint\"\u003e\u003c/a\u003e [enable\\_private\\_endpoint](#input\\_enable\\_private\\_endpoint) | Enables private endpoint for GKE master. Defaults to \"false\". | `bool` | `false` | no |\n| \u003ca name=\"input_enable_private_gke\"\u003e\u003c/a\u003e [enable\\_private\\_gke](#input\\_enable\\_private\\_gke) | Enables private GKE cluster, where nodes are not publicly accessible. Defaults to \"false\". | `bool` | `false` | no |\n| \u003ca name=\"input_enable_private_nodes\"\u003e\u003c/a\u003e [enable\\_private\\_nodes](#input\\_enable\\_private\\_nodes) | Whether nodes have internal IP addresses only. | `bool` | `false` | no |\n| \u003ca name=\"input_enable_resource_creation\"\u003e\u003c/a\u003e [enable\\_resource\\_creation](#input\\_enable\\_resource\\_creation) | When enabled, all dependencies, like service accounts, buckets, etc will be created. When disabled, they will note. Use in combination with `enable_\u003capp\u003e` to manage these outside this module | `bool` | `true` | no |\n| \u003ca name=\"input_firewall_inbound_ports\"\u003e\u003c/a\u003e [firewall\\_inbound\\_ports](#input\\_firewall\\_inbound\\_ports) | List of TCP ports for admission/webhook controllers. Either flag `add_master_webhook_firewall_rules` or `add_cluster_firewall_rules` (also adds egress rules) must be set to `true` for inbound-ports firewall rules to be applied. | `list(string)` | \u003cpre\u003e[\u003cbr\u003e  \"5443\",\u003cbr\u003e  \"8443\",\u003cbr\u003e  \"9443\",\u003cbr\u003e  \"15017\"\u003cbr\u003e]\u003c/pre\u003e | no |\n| \u003ca name=\"input_fleet_project\"\u003e\u003c/a\u003e [fleet\\_project](#input\\_fleet\\_project) | The Fleet project to register the GKE cluster to. If not set, the GKE cluster's project will be used. | `string` | `null` | no |\n| \u003ca name=\"input_func_pool_auto_repair\"\u003e\u003c/a\u003e [func\\_pool\\_auto\\_repair](#input\\_func\\_pool\\_auto\\_repair) | Enable auto-repair for the Pulsar Functions pool. | `bool` | `true` | no |\n| \u003ca name=\"input_func_pool_auto_upgrade\"\u003e\u003c/a\u003e [func\\_pool\\_auto\\_upgrade](#input\\_func\\_pool\\_auto\\_upgrade) | Enable auto-upgrade for the Pulsar Functions pool. | `bool` | `true` | no |\n| \u003ca name=\"input_func_pool_autoscaling\"\u003e\u003c/a\u003e [func\\_pool\\_autoscaling](#input\\_func\\_pool\\_autoscaling) | Enable autoscaling of the Pulsar Functions pool. Defaults to \"true\". | `bool` | `true` | no |\n| \u003ca name=\"input_func_pool_autoscaling_initial_count\"\u003e\u003c/a\u003e [func\\_pool\\_autoscaling\\_initial\\_count](#input\\_func\\_pool\\_autoscaling\\_initial\\_count) | The initial number of nodes in the Pulsar Functions pool, per zone, when autoscaling is enabled. Defaults to 0. | `number` | `0` | no |\n| \u003ca name=\"input_func_pool_autoscaling_max_size\"\u003e\u003c/a\u003e [func\\_pool\\_autoscaling\\_max\\_size](#input\\_func\\_pool\\_autoscaling\\_max\\_size) | The maximum size of the Pulsar Functions pool Autoscaling group. Defaults to 3. | `number` | `3` | no |\n| \u003ca name=\"input_func_pool_autoscaling_min_size\"\u003e\u003c/a\u003e [func\\_pool\\_autoscaling\\_min\\_size](#input\\_func\\_pool\\_autoscaling\\_min\\_size) | The minimum size of the Pulsar Functions pool AutoScaling group. Defaults to 0. | `number` | `0` | no |\n| \u003ca name=\"input_func_pool_count\"\u003e\u003c/a\u003e [func\\_pool\\_count](#input\\_func\\_pool\\_count) | The number of worker nodes in the Pulsar Functions pool. This is only used if func\\_pool\\_autoscaling is set to false. Defaults to 1. | `number` | `1` | no |\n| \u003ca name=\"input_func_pool_disk_size\"\u003e\u003c/a\u003e [func\\_pool\\_disk\\_size](#input\\_func\\_pool\\_disk\\_size) | Disk size in GB for worker nodes in the Pulsar Functions pool. Defaults to 100. | `number` | `100` | no |\n| \u003ca name=\"input_func_pool_disk_type\"\u003e\u003c/a\u003e [func\\_pool\\_disk\\_type](#input\\_func\\_pool\\_disk\\_type) | The type disk attached to worker nodes in the Pulsar Functions pool. Defaults to \"pd-standard\". | `string` | `\"pd-standard\"` | no |\n| \u003ca name=\"input_func_pool_image_type\"\u003e\u003c/a\u003e [func\\_pool\\_image\\_type](#input\\_func\\_pool\\_image\\_type) | The image type to use for worker nodes in the Pulsar Functions pool. Defaults to \"COS\" (cointainer-optimized OS with docker). | `string` | `\"COS_CONTAINERD\"` | no |\n| \u003ca name=\"input_func_pool_locations\"\u003e\u003c/a\u003e [func\\_pool\\_locations](#input\\_func\\_pool\\_locations) | A string of comma seperated values (upstream requirement) of zones for the Pulsar Functions pool, e.g. \"us-central1-b,us-central1-c\" etc. Nodes must be in the same region as the cluster. Defaults to three random zones in the region specified for the cluster via the \"cluster\\_location\" input, or the zones provided through the \"node\\_pool\\_locations\" input (if it is defined). | `string` | `\"\"` | no |\n| \u003ca name=\"input_func_pool_machine_type\"\u003e\u003c/a\u003e [func\\_pool\\_machine\\_type](#input\\_func\\_pool\\_machine\\_type) | The machine type to use for worker nodes in the Pulsar Functions pool. Defaults to \"n2-standard-4\". | `string` | `\"n2-standard-4\"` | no |\n| \u003ca name=\"input_func_pool_max_pods_per_node\"\u003e\u003c/a\u003e [func\\_pool\\_max\\_pods\\_per\\_node](#input\\_func\\_pool\\_max\\_pods\\_per\\_node) | the number of pods per node | `number` | `110` | no |\n| \u003ca name=\"input_func_pool_name\"\u003e\u003c/a\u003e [func\\_pool\\_name](#input\\_func\\_pool\\_name) | The name of the Pulsar Functions pool. Defaults to \"default-node-pool\". | `string` | `\"func-pool\"` | no |\n| \u003ca name=\"input_func_pool_service_account\"\u003e\u003c/a\u003e [func\\_pool\\_service\\_account](#input\\_func\\_pool\\_service\\_account) | The service account email address to use for the Pulsar Functions pool. If create\\_service\\_account is set to true, it will use the the output from the module. | `string` | `\"\"` | no |\n| \u003ca name=\"input_func_pool_ssd_count\"\u003e\u003c/a\u003e [func\\_pool\\_ssd\\_count](#input\\_func\\_pool\\_ssd\\_count) | The number of SSDs to attach to each node in the Pulsar Functions pool. Defaults to 0. | `number` | `0` | no |\n| \u003ca name=\"input_func_pool_version\"\u003e\u003c/a\u003e [func\\_pool\\_version](#input\\_func\\_pool\\_version) | The version of Kubernetes to use for the Pulsar Functions pool. If the input \"release\\_channel\" is not defined, defaults to \"kubernetes\\_version\" used for the cluster. Should only be defined while \"func\\_pool\\_auto\\_upgrade\" is also set to \"false\". | `string` | `\"\"` | no |\n| \u003ca name=\"input_gcp_public_cidrs_access_enabled\"\u003e\u003c/a\u003e [gcp\\_public\\_cidrs\\_access\\_enabled](#input\\_gcp\\_public\\_cidrs\\_access\\_enabled) | Enable access from GCP public CIDRs. Defaults to false. | `bool` | `false` | no |\n| \u003ca name=\"input_google_service_account\"\u003e\u003c/a\u003e [google\\_service\\_account](#input\\_google\\_service\\_account) | when set, don't create GSAs and instead use the this service account for all apps | `string` | `\"\"` | no |\n| \u003ca name=\"input_kubernetes_version\"\u003e\u003c/a\u003e [kubernetes\\_version](#input\\_kubernetes\\_version) | The version of Kubernetes to use for the cluster. Defaults to \"latest\", which uses the latest available version for GKE in the region specified. | `string` | `\"latest\"` | no |\n| \u003ca name=\"input_logging_enabled_components\"\u003e\u003c/a\u003e [logging\\_enabled\\_components](#input\\_logging\\_enabled\\_components) | List of services to monitor: SYSTEM\\_COMPONENTS, APISERVER, CONTROLLER\\_MANAGER, SCHEDULER, WORKLOADS. Empty list is default GKE configuration. | `list(string)` | `[]` | no |\n| \u003ca name=\"input_logging_service\"\u003e\u003c/a\u003e [logging\\_service](#input\\_logging\\_service) | The logging service to use for the cluster. Defaults to \"logging.googleapis.com/kubernetes\". | `string` | `\"logging.googleapis.com/kubernetes\"` | no |\n| \u003ca name=\"input_maintenance_exclusions\"\u003e\u003c/a\u003e [maintenance\\_exclusions](#input\\_maintenance\\_exclusions) | A list of objects used to define exceptions to the maintenance window, when non-emergency maintenance should not occur. Can have up to three exclusions. Refer to the offical Terraform docs on the \"google\\_container\\_cluster\" resource for object schema. | `list(object({ name = string, start_time = string, end_time = string, exclusion_scope = string }))` | `[]` | no |\n| \u003ca name=\"input_maintenance_window\"\u003e\u003c/a\u003e [maintenance\\_window](#input\\_maintenance\\_window) | The start time (in RFC3339 format) for the GKE to perform maintenance operations. Defaults to \"05:00\". | `string` | `\"05:00\"` | no |\n| \u003ca name=\"input_master_authorized_networks\"\u003e\u003c/a\u003e [master\\_authorized\\_networks](#input\\_master\\_authorized\\_networks) | A list of objects used to define authorized networks. If none are provided, the default is to disallow external access. See the parent module for more details. https://registry.terraform.io/modules/terraform-google-modules/kubernetes-engine/google/latest | `list(object({ cidr_block = string, display_name = string }))` | `[]` | no |\n| \u003ca name=\"input_master_global_access_enabled\"\u003e\u003c/a\u003e [master\\_global\\_access\\_enabled](#input\\_master\\_global\\_access\\_enabled) | Whether the cluster master is accessible globally (from any region) or only within the same region as the private endpoint. | `bool` | `false` | no |\n| \u003ca name=\"input_master_ipv4_cidr_block\"\u003e\u003c/a\u003e [master\\_ipv4\\_cidr\\_block](#input\\_master\\_ipv4\\_cidr\\_block) | The IP range in CIDR notation to use for the hosted master network. Only used for private clusters | `string` | `\"10.0.0.0/28\"` | no |\n| \u003ca name=\"input_monitoring_enabled_components\"\u003e\u003c/a\u003e [monitoring\\_enabled\\_components](#input\\_monitoring\\_enabled\\_components) | List of services to monitor: SYSTEM\\_COMPONENTS, APISERVER, CONTROLLER\\_MANAGER, SCHEDULER. Empty list is default GKE configuration. | `list(string)` | `[]` | no |\n| \u003ca name=\"input_network_project_id\"\u003e\u003c/a\u003e [network\\_project\\_id](#input\\_network\\_project\\_id) | If using a different project, the id of the project | `string` | `\"\"` | no |\n| \u003ca name=\"input_node_pool_auto_repair\"\u003e\u003c/a\u003e [node\\_pool\\_auto\\_repair](#input\\_node\\_pool\\_auto\\_repair) | Enable auto-repair for the default node pool. | `bool` | `true` | no |\n| \u003ca name=\"input_node_pool_auto_upgrade\"\u003e\u003c/a\u003e [node\\_pool\\_auto\\_upgrade](#input\\_node\\_pool\\_auto\\_upgrade) | Enable auto-upgrade for the default node pool. | `bool` | `true` | no |\n| \u003ca name=\"input_node_pool_autoscaling\"\u003e\u003c/a\u003e [node\\_pool\\_autoscaling](#input\\_node\\_pool\\_autoscaling) | Enable autoscaling of the default node pool. Defaults to \"true\". | `bool` | `true` | no |\n| \u003ca name=\"input_node_pool_autoscaling_initial_count\"\u003e\u003c/a\u003e [node\\_pool\\_autoscaling\\_initial\\_count](#input\\_node\\_pool\\_autoscaling\\_initial\\_count) | The initial number of nodes per zone in the default node pool, PER ZONE, when autoscaling is enabled. Defaults to 1. | `number` | `1` | no |\n| \u003ca name=\"input_node_pool_autoscaling_max_size\"\u003e\u003c/a\u003e [node\\_pool\\_autoscaling\\_max\\_size](#input\\_node\\_pool\\_autoscaling\\_max\\_size) | The maximum size of the default node pool Autoscaling group. Defaults to 5. | `number` | `5` | no |\n| \u003ca name=\"input_node_pool_autoscaling_min_size\"\u003e\u003c/a\u003e [node\\_pool\\_autoscaling\\_min\\_size](#input\\_node\\_pool\\_autoscaling\\_min\\_size) | The minimum size of the default node pool AutoScaling group. Defaults to 1. | `number` | `1` | no |\n| \u003ca name=\"input_node_pool_count\"\u003e\u003c/a\u003e [node\\_pool\\_count](#input\\_node\\_pool\\_count) | The number of worker nodes in the default node pool. This is only used if node\\_pool\\_autoscaling is set to false. Defaults to 3. | `number` | `3` | no |\n| \u003ca name=\"input_node_pool_disk_size\"\u003e\u003c/a\u003e [node\\_pool\\_disk\\_size](#input\\_node\\_pool\\_disk\\_size) | Disk size in GB for worker nodes in the default node pool. Defaults to 100. | `number` | `100` | no |\n| \u003ca name=\"input_node_pool_disk_type\"\u003e\u003c/a\u003e [node\\_pool\\_disk\\_type](#input\\_node\\_pool\\_disk\\_type) | The type disk attached to worker nodes in the default node pool. Defaults to \"pd-standard\". | `string` | `\"pd-standard\"` | no |\n| \u003ca name=\"input_node_pool_image_type\"\u003e\u003c/a\u003e [node\\_pool\\_image\\_type](#input\\_node\\_pool\\_image\\_type) | The image type to use for worker nodes in the default node pool. Defaults to \"COS\" (cointainer-optimized OS with docker). | `string` | `\"COS_CONTAINERD\"` | no |\n| \u003ca name=\"input_node_pool_locations\"\u003e\u003c/a\u003e [node\\_pool\\_locations](#input\\_node\\_pool\\_locations) | A string of comma seperated values (upstream requirement) of zones for the location of the default node pool, e.g. \"us-central1-b,us-central1-c\" etc. Nodes must be in the region as the cluster. Defaults to three random zones in the region chosen for the cluster | `string` | `\"\"` | no |\n| \u003ca name=\"input_node_pool_machine_type\"\u003e\u003c/a\u003e [node\\_pool\\_machine\\_type](#input\\_node\\_pool\\_machine\\_type) | The machine type to use for worker nodes in the default node pool. Defaults to \"n2-standard-8\". | `string` | `\"n2-standard-8\"` | no |\n| \u003ca name=\"input_node_pool_max_pods_per_node\"\u003e\u003c/a\u003e [node\\_pool\\_max\\_pods\\_per\\_node](#input\\_node\\_pool\\_max\\_pods\\_per\\_node) | the number of pods per node | `number` | `110` | no |\n| \u003ca name=\"input_node_pool_name\"\u003e\u003c/a\u003e [node\\_pool\\_name](#input\\_node\\_pool\\_name) | The name of the default node pool. Defaults to \"sn-node-pool\". | `string` | `\"default-node-pool\"` | no |\n| \u003ca name=\"input_node_pool_secure_boot\"\u003e\u003c/a\u003e [node\\_pool\\_secure\\_boot](#input\\_node\\_pool\\_secure\\_boot) | enable the node pool secure boot setting | `bool` | `false` | no |\n| \u003ca name=\"input_node_pool_service_account\"\u003e\u003c/a\u003e [node\\_pool\\_service\\_account](#input\\_node\\_pool\\_service\\_account) | The service account email address to use for the default node pool. If create\\_service\\_account is set to true, it will use the the output from the module. | `string` | `\"\"` | no |\n| \u003ca name=\"input_node_pool_ssd_count\"\u003e\u003c/a\u003e [node\\_pool\\_ssd\\_count](#input\\_node\\_pool\\_ssd\\_count) | The number of SSDs to attach to each node in the default node pool | `number` | `0` | no |\n| \u003ca name=\"input_node_pool_version\"\u003e\u003c/a\u003e [node\\_pool\\_version](#input\\_node\\_pool\\_version) | The version of Kubernetes to use for the default node pool. If the input \"release\\_channel\" is not defined, defaults to \"kubernetes\\_version\" used for the cluster. Should only be defined while \"node\\_pool\\_auto\\_upgrade\" is also set to \"false\". | `string` | `\"\"` | no |\n| \u003ca name=\"input_private_endpoint_subnetwork\"\u003e\u003c/a\u003e [private\\_endpoint\\_subnetwork](#input\\_private\\_endpoint\\_subnetwork) | The subnetwork to use for the hosted master network. | `string` | `null` | no |\n| \u003ca name=\"input_project_id\"\u003e\u003c/a\u003e [project\\_id](#input\\_project\\_id) | The project ID to use for the cluster. Defaults to the current GCP project. | `string` | n/a | yes |\n| \u003ca name=\"input_region\"\u003e\u003c/a\u003e [region](#input\\_region) | The GCP region where the GKE cluster will be deployed. This module only supports creation of a regional cluster | `string` | n/a | yes |\n| \u003ca name=\"input_release_channel\"\u003e\u003c/a\u003e [release\\_channel](#input\\_release\\_channel) | The Kubernetes release channel to use for the cluster. Accepted values are \"UNSPECIFIED\", \"RAPID\", \"REGULAR\" and \"STABLE\". Defaults to \"UNSPECIFIED\". | `string` | `\"STABLE\"` | no |\n| \u003ca name=\"input_secondary_ip_range_pods\"\u003e\u003c/a\u003e [secondary\\_ip\\_range\\_pods](#input\\_secondary\\_ip\\_range\\_pods) | The name of the secondary range to use for the pods in the cluster. If no secondary range for the pod network is provided, GKE will create a /14 CIDR within the subnetwork provided by the \"vpc\\_subnet\" input | `string` | `null` | no |\n| \u003ca name=\"input_secondary_ip_range_pods_cidr\"\u003e\u003c/a\u003e [secondary\\_ip\\_range\\_pods\\_cidr](#input\\_secondary\\_ip\\_range\\_pods\\_cidr) | The cidr of the secondary range, required when using cillium | `string` | `null` | no |\n| \u003ca name=\"input_secondary_ip_range_services\"\u003e\u003c/a\u003e [secondary\\_ip\\_range\\_services](#input\\_secondary\\_ip\\_range\\_services) | The name of the secondary range to use for services in the cluster. If no secondary range for the services network is provided, GKE will create a /20 CIDR within the subnetwork provided by the \"vpc\\_subnet\" input | `string` | `null` | no |\n| \u003ca name=\"input_storage_class_default_ssd\"\u003e\u003c/a\u003e [storage\\_class\\_default\\_ssd](#input\\_storage\\_class\\_default\\_ssd) | determines if the default storage class should be with ssd | `bool` | `false` | no |\n| \u003ca name=\"input_suffix\"\u003e\u003c/a\u003e [suffix](#input\\_suffix) | A unique string that is used to distinguish cluster resources, where name length constraints are imposed by GKE. Defaults to an empty string. | `string` | `\"\"` | no |\n| \u003ca name=\"input_vpc_network\"\u003e\u003c/a\u003e [vpc\\_network](#input\\_vpc\\_network) | The name of the VPC network to use for the cluster. Can be set to \"default\" if the default VPC is enabled in the project | `string` | n/a | yes |\n| \u003ca name=\"input_vpc_subnet\"\u003e\u003c/a\u003e [vpc\\_subnet](#input\\_vpc\\_subnet) | The name of the VPC subnetwork to use by the cluster nodes. Can be set to \"default\" if the default VPC is enabled in the project, and GKE will choose the subnetwork based on the \"region\" input | `string` | n/a | yes |\n\n## Outputs\n\n| Name | Description |\n|------|-------------|\n| \u003ca name=\"output_ca_certificate\"\u003e\u003c/a\u003e [ca\\_certificate](#output\\_ca\\_certificate) | n/a |\n| \u003ca name=\"output_endpoint\"\u003e\u003c/a\u003e [endpoint](#output\\_endpoint) | n/a |\n| \u003ca name=\"output_id\"\u003e\u003c/a\u003e [id](#output\\_id) | n/a |\n| \u003ca name=\"output_master_version\"\u003e\u003c/a\u003e [master\\_version](#output\\_master\\_version) | n/a |\n| \u003ca name=\"output_name\"\u003e\u003c/a\u003e [name](#output\\_name) | n/a |\n| \u003ca name=\"output_node_pool_azs\"\u003e\u003c/a\u003e [node\\_pool\\_azs](#output\\_node\\_pool\\_azs) | n/a |\n| \u003ca name=\"output_service_account\"\u003e\u003c/a\u003e [service\\_account](#output\\_service\\_account) | n/a |\n\u003c!-- END_TF_DOCS --\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstreamnative%2Fterraform-google-cloud","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fstreamnative%2Fterraform-google-cloud","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstreamnative%2Fterraform-google-cloud/lists"}