feat: Add support for enabling Nodelocal dns cache (var.dns_cache) (terraform-google-modules#477)

* added support for node local dns cache * config block * updates to testing Signed-off-by: Jonathan Meyers <jonathan@cybrary.it> * generate docs again for example change

Author: jmymy

autogen/main/README.md

@@ -84,6 +84,7 @@ module "gke" {
  {% if beta_cluster %}
  istio = true
  cloudrun = true
+ dns_cache = false
  {% endif %}
 
  node_pools = [

autogen/main/cluster.tf.tmpl

@@ -157,6 +157,10 @@ resource "google_container_cluster" "primary" {
  disabled = cloudrun_config.value.disabled
  }
  }
+
+ dns_cache_config {
+ enabled = var.dns_cache
+ }
  {% endif %}
  }
 

autogen/main/main.tf.tmpl

@@ -160,6 +160,7 @@ locals {
  # BETA features
  cluster_istio_enabled = ! local.cluster_output_istio_disabled
  cluster_cloudrun_enabled = var.cloudrun
+ cluster_dns_cache_enabled = var.dns_cache
  cluster_pod_security_policy_enabled = local.cluster_output_pod_security_policy_enabled
  cluster_intranode_visibility_enabled = local.cluster_output_intranode_visbility_enabled
  cluster_vertical_pod_autoscaling_enabled = local.cluster_output_vertical_pod_autoscaling_enabled

autogen/main/outputs.tf.tmpl

@@ -138,6 +138,11 @@ output "cloudrun_enabled" {
  value = local.cluster_cloudrun_enabled
 }
 
+output "dns_cache_enabled" {
+ description = "Whether DNS Cache enabled"
+ value = local.cluster_dns_cache_enabled
+}
+
 output "pod_security_policy_enabled" {
  description = "Whether pod security policy is enabled"
  value = local.cluster_pod_security_policy_enabled

autogen/main/variables.tf.tmpl

@@ -399,6 +399,12 @@ variable "istio_auth" {
  default = "AUTH_MUTUAL_TLS"
 }
 
+variable "dns_cache" {
+ type = bool
+ description = "(Beta) The status of the NodeLocal DNSCache addon."
+ default = false
+}
+
 variable "database_encryption" {
  description = "Application-layer Secrets Encryption settings. The object format is {state = string, key_name = string}. Valid values of state are: \"ENCRYPTED\"; \"DECRYPTED\". key_name is the name of a CloudKMS key."
  type = list(object({ state = string, key_name = string }))

autogen/safer-cluster/main.tf.tmpl

@@ -122,6 +122,8 @@ module "gke" {
 
  cloudrun = var.cloudrun
 
+ dns_cache = var.dns_cache
+
  default_max_pods_per_node = var.default_max_pods_per_node
 
  database_encryption = var.database_encryption

autogen/safer-cluster/variables.tf.tmpl

@@ -237,6 +237,12 @@ variable "istio_auth" {
  default = "AUTH_MUTUAL_TLS"
 }
 
+variable "dns_cache" {
+ type = bool
+ description = "(Beta) The status of the NodeLocal DNSCache addon."
+ default = false
+}
+
 variable "default_max_pods_per_node" {
  description = "The maximum number of pods to schedule per node"
  default = 110

examples/node_pool/main.tf

@@ -19,7 +19,7 @@ locals {
 }
 
 provider "google-beta" {
- version = "~> 3.12.0"
+ version = "~> 3.14.0"
  region = var.region
 }
 

examples/node_pool_update_variant/main.tf

@@ -19,7 +19,7 @@ locals {
 }
 
 provider "google" {
- version = "~> 3.12.0"
+ version = "~> 3.14.0"
  region = var.region
 }
 

examples/node_pool_update_variant_beta/main.tf

@@ -19,7 +19,7 @@ locals {
 }
 
 provider "google-beta" {
- version = "~> 3.12.0"
+ version = "~> 3.14.0"
  credentials = file(var.credentials_path)
  region = var.region
 }