feat: Add support for configuring allow_net_admin in autopilot clusters

[rossbannerman]

Makes allow_net_admin configurable in new and existing clusters. Defaults to false. Commonly required by service meshes such as Istio and Linkerd

Feedback appreciated!

Changes:

• autogen/main/cluster.tf.tmpl
• autogen/main/variables.tf.tmpl

Documentation:

• https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/container_cluster#allow_net_admin
• https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-security#built-in-security

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[sonja-hiltunen-ivadolabs]

Is anyone still working on this?

[apeabody]

Thanks for the contibution @rossbannerman!

[apeabody]

/gcbrun

[apeabody]

/gcbrun

[apeabody]

Thanks - After updating the template you will need to re-run make generate and make generate_docs.

[rossbannerman]

@apeabody How's that? Thanks again for the guidance - appreciate it

[apeabody]

/gcbrun

[apeabody]

@apeabody How's that? Thanks again for the guidance - appreciate it

Thanks - Triggered the CI

[rossbannerman]

@apeabody How's that? Thanks again for the guidance - appreciate it

Thanks - Triggered the CI

Thanks! Looks like this failed but I can't seem to see the results 👀

[apeabody]

@apeabody How's that? Thanks again for the guidance - appreciate it

Thanks - Triggered the CI

Thanks! Looks like this failed but I can't seem to see the results 👀

At least initially appears to be unrelated, I've opened #1801

[apeabody]

/gcbrun

[apeabody]

Re-triggering Error: Error waiting for creating GKE cluster: Failed to create cluster

[apeabody]

Thanks for the contribution @rossbannerman!