* updated CHANGELOG.md [ci skip]

* updated README.md
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

* add safer cluster access pattern

* Apply suggestions from code review

address comments
Co-authored-by: Morgante Pell <morgantep@google.com>

* remove redundant var

* add e2e test

* fix e2e

* fix sandbox-enabled tests
Co-authored-by: Morgante Pell <morgantep@google.com>

* Add doc about priate clusters

* Remove file structure from README

* Move private cluster notes to doc.

Docs on GKE authorized networks dont mention anywhere that IP must belong to Google network.

Ref: https://cloud.google.com/kubernetes-engine/docs/how-to/authorized-networks

* edits to the some param descriptions to clarify use relative to google_container_cluster

* edits to the some param descriptions to clarify use relative to google_container_cluster

* terraform fmt fixes

* now ignore setting un specified policy dir, uses configmanagement defaults instead of shadowing them

* now also use configmanagement defaults for sync branch

* ran docs

* focused the param descriptions some, as they were a bit verbose and got good feedback to remove unnecessary detail

* regenerating docs after the change to make descriptions more concise

Signed-off-by: Ramon Rüttimann <ramon@nine.ch>

* updated CHANGELOG.md [ci skip]

* updated README.md
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

* Add secure boot and integrity monitoring in beta-private-cluster-update-variant README.md

* Add secure boot and integrity monitoring in beta-private-cluster-update-variant README.md

* Add secure boot and integrity monitoring in beta-private-cluster-update-variant README.md

Co-authored-by: c0feec0der <>

Corrected the heading

* updated CHANGELOG.md [ci skip]

* updated README.md [ci skip]
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

Co-authored-by: Daniel Patriche <daniel@mambu.com>

* Expose gce_pd_csi_driver for Safer Cluster modules #503

* Use autogen folder to generate modules #503
Co-authored-by: Daniel Patriche <daniel@mambu.com>

* updated CHANGELOG.md [ci skip]

* updated README.md [ci skip]
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

* upgrade guide

* upgrade guide

* add node_metadata change, add more details about breaking changes

* markdown fmt

BREAKING CHANGE: Beta clusters have changed the default to use the GKE_METADATA_SERVER, to use the old option set `node_metadata = "SECURE"`.

Issue: https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/issues/508

* Expose node pool shielded_instance_config

Co-authored-by: c0feec0der <>

* Fixes #489 Identity namespace output for beta clusters

The identity namespace flag was "enabled". Changed the output value to reference the actual identity namespace of the cluster / the project.

* Fixed tests by re-building the module

Since the CI configuration in the test folder is no longer needed, we can safely delete those.

BREAKING CHANGE: Minimum provider change increased to 3.19.

BREAKING CHANGE: The ACM module has been refactored and resources will be recreated. This will show up in Terraform plans but is a safe no-op for Kubernetes.

BREAKING CHANGE: Minimum Google provider version increased to 3.16.

* Squash Commits
Signed-off-by: Dev <Dev25@users.noreply.github.com>

* Fix example
Signed-off-by: Dev <Dev25@users.noreply.github.com>

* Rename var + update README
Signed-off-by: Dev <Dev25@users.noreply.github.com>

* Set to false as default
Signed-off-by: Dev <Dev25@users.noreply.github.com>

* Enable firewall support in shared_vpc example
Signed-off-by: Dev <Dev25@users.noreply.github.com>

* Remove network datasource and make subnetwork conditional on firewall
Signed-off-by: Dev <Dev25@users.noreply.github.com>

* Fix attribute error
Signed-off-by: Dev <Dev25@users.noreply.github.com>

BREAKING CHANGE: For the safer cluster module, you must now specify `release_channel` instead of `kubernetes_version`.

* Add GKE auth submodule

* Add example of auth submodule

* Fix copyright dates

* Linting

* Register test

* Add test fixtures

* updated CHANGELOG.md [ci skip]

* updated README.md [ci skip]
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

feat: Add peering_name output for private clusters and increase minimum provider version to 3.14 (#484)

* added support for node local dns cache

* config block

* updates to testing
Signed-off-by: Jonathan Meyers <jonathan@cybrary.it>

* generate docs again for example change