feat(TPG>=5.25.0)!: Add support for StatefulHA Addon (#1948)

Author: pwschuurman

README.md

@@ -228,6 +228,7 @@ Then perform the following commands on the root folder:
 | shadow\_firewall\_rules\_log\_config | The log\_config for shadow firewall rules. You can set this variable to `null` to disable logging. | <pre>object({<br> metadata = string<br> })</pre> | <pre>{<br> "metadata": "INCLUDE_ALL_METADATA"<br>}</pre> | no |
 | shadow\_firewall\_rules\_priority | The firewall priority of GKE shadow firewall rules. The priority should be less than default firewall, which is 1000. | `number` | `999` | no |
 | stack\_type | The stack type to use for this cluster. Either `IPV4` or `IPV4_IPV6`. Defaults to `IPV4`. | `string` | `"IPV4"` | no |
+| stateful\_ha | Whether the Stateful HA Addon is enabled for this cluster. | `bool` | `false` | no |
 | stub\_domains | Map of stub domains and their resolvers to forward DNS queries for a certain domain to an external DNS server | `map(list(string))` | `{}` | no |
 | subnetwork | The subnetwork to host the cluster in (required) | `string` | n/a | yes |
 | timeouts | Timeout for cluster operations. | `map(string)` | `{}` | no |

autogen/main/cluster.tf.tmpl

@@ -309,6 +309,14 @@ resource "google_container_cluster" "primary" {
  }
  }
 
+ dynamic "stateful_ha_config" {
+ for_each = local.stateful_ha_config
+
+ content {
+ enabled = stateful_ha_config.value.enabled
+ }
+ }
+
  config_connector_config {
  enabled = var.config_connector
  }

autogen/main/main.tf.tmpl

@@ -109,6 +109,7 @@ locals {
  logmon_config_is_set = length(var.logging_enabled_components) > 0 || length(var.monitoring_enabled_components) > 0 || var.monitoring_enable_managed_prometheus
  gke_backup_agent_config = var.gke_backup_agent_config ? [{ enabled = true }] : [{ enabled = false }]
  gcs_fuse_csi_driver_config = var.gcs_fuse_csi_driver ? [{ enabled = true }] : []
+ stateful_ha_config = var.stateful_ha ? [{ enabled = true }] : []
 {% endif %}
 {% if beta_cluster and autopilot_cluster != true %}
  cluster_cloudrun_config_load_balancer_config = (var.cloudrun && var.cloudrun_load_balancer_type != "") ? {

autogen/main/variables.tf.tmpl

@@ -725,6 +725,12 @@ variable "gcs_fuse_csi_driver" {
  default = false
 }
 
+variable "stateful_ha" {
+ type = bool
+ description = "Whether the Stateful HA Addon is enabled for this cluster."
+ default = false
+}
+
 {% endif %}
 variable "timeouts" {
  type = map(string)

autogen/main/versions.tf.tmpl

@@ -24,11 +24,11 @@ terraform {
  required_providers {
  google = {
  source = "hashicorp/google"
- version = ">= 5.9.0, < 6"
+ version = ">= 5.25.0, < 6"
  }
  google-beta = {
  source = "hashicorp/google-beta"
- version = ">= 5.9.0, < 6"
+ version = ">= 5.25.0, < 6"
  }
  kubernetes = {
  source = "hashicorp/kubernetes"

cluster.tf

@@ -229,6 +229,14 @@ resource "google_container_cluster" "primary" {
  }
  }
 
+ dynamic "stateful_ha_config" {
+ for_each = local.stateful_ha_config
+
+ content {
+ enabled = stateful_ha_config.value.enabled
+ }
+ }
+
  config_connector_config {
  enabled = var.config_connector
  }

examples/simple_regional/main.tf

@@ -45,4 +45,5 @@ module "gke" {
  gcs_fuse_csi_driver = true
  fleet_project = var.project_id
  deletion_protection = false
+ stateful_ha = true
 }

main.tf

@@ -94,6 +94,7 @@ locals {
  logmon_config_is_set = length(var.logging_enabled_components) > 0 || length(var.monitoring_enabled_components) > 0 || var.monitoring_enable_managed_prometheus
  gke_backup_agent_config = var.gke_backup_agent_config ? [{ enabled = true }] : [{ enabled = false }]
  gcs_fuse_csi_driver_config = var.gcs_fuse_csi_driver ? [{ enabled = true }] : []
+ stateful_ha_config = var.stateful_ha ? [{ enabled = true }] : []
 
  cluster_authenticator_security_group = var.authenticator_security_group == null ? [] : [{
  security_group = var.authenticator_security_group

modules/beta-autopilot-private-cluster/versions.tf

@@ -21,11 +21,11 @@ terraform {
  required_providers {
  google = {
  source = "hashicorp/google"
- version = ">= 5.9.0, < 6"
+ version = ">= 5.25.0, < 6"
  }
  google-beta = {
  source = "hashicorp/google-beta"
- version = ">= 5.9.0, < 6"
+ version = ">= 5.25.0, < 6"
  }
  kubernetes = {
  source = "hashicorp/kubernetes"

modules/beta-autopilot-public-cluster/versions.tf

@@ -21,11 +21,11 @@ terraform {
  required_providers {
  google = {
  source = "hashicorp/google"
- version = ">= 5.9.0, < 6"
+ version = ">= 5.25.0, < 6"
  }
  google-beta = {
  source = "hashicorp/google-beta"
- version = ">= 5.9.0, < 6"
+ version = ">= 5.25.0, < 6"
  }
  kubernetes = {
  source = "hashicorp/kubernetes"