feat!: enabling vulnerability and audit modes for workloads

[mmorejon]

Enable vulnerability and audit modes for workloads.

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[apeabody]

Are these new default values going to cause a replacement for existing clusters? Could we use null?

[mmorejon]

workload_config_audit_mode cannot be null. This value is required. I got this message setting the value as null.

The argument "protect_config.0.workload_config.0.audit_mode" is required, but no definition was found.

workload_vulnerability_mode has the same behavior using an empty string or null value. I got a change in the tfstate only when DISABLED or BASIC is used.

~ protect_config {
   ~ workload_vulnerability_mode = "WORKLOAD_VULNERABILITY_MODE_UNSPECIFIED" -> "DISABLED"
}

and

~ protect_config {
   ~ workload_vulnerability_mode = "WORKLOAD_VULNERABILITY_MODE_UNSPECIFIED" -> "BASIC"
}

[mmorejon]

@apeabody , what do you think?

[apeabody]

Hi @mmorejon - Yeah, for simplicity, I recommend we just go with default = "" and mark this as a breaking change.

[mmorejon]

Done. I set back the default value to empty.

[apeabody]

/gcbrun

[mmorejon]

Do you have any other suggestions? @apeabody

[apeabody]

/gcbrun

[apeabody]

Thanks for the contribution @mmorejon!