🧱 Update the configuration for blocking node metadata on GKE (fixing a Terraform API breaking change regression)

ndebuhr · ndebuhr · commit b9429b53c464 · 2021-11-05T23:45:09.000Z
diff --git a/provision/gke-with-gpu/gke.tf b/provision/gke-with-gpu/gke.tf
@@ -35,7 +35,7 @@ resource "google_container_node_pool" "primary_core" {
       "https://www.googleapis.com/auth/devstorage.read_only"
     ]
     workload_metadata_config {
-      node_metadata = "SECURE"
+      mode = "UNSPECIFIED"
     }
   }
 }
@@ -57,7 +57,7 @@ resource "google_container_node_pool" "primary_ml" {
       "https://www.googleapis.com/auth/devstorage.read_only"
     ]
     workload_metadata_config {
-      node_metadata = "SECURE"
+      mode = "UNSPECIFIED"
     }
     guest_accelerator {
       type  = var.gcp_gpu
diff --git a/provision/gke/gke.tf b/provision/gke/gke.tf
@@ -35,7 +35,7 @@ resource "google_container_node_pool" "primary_core" {
       "https://www.googleapis.com/auth/devstorage.read_only"
     ]
     workload_metadata_config {
-      node_metadata = "SECURE"
+      mode = "UNSPECIFIED"
     }
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -35,7 +35,7 @@ resource "google_container_node_pool" "primary_core" {`
`35`	`35`	`"https://www.googleapis.com/auth/devstorage.read_only"`
`36`	`36`	`]`
`37`	`37`	`workload_metadata_config {`
`38`		`- node_metadata = "SECURE"`
	`38`	`+ mode = "UNSPECIFIED"`
`39`	`39`	`}`
`40`	`40`	`}`
`41`	`41`	`}`
`@@ -57,7 +57,7 @@ resource "google_container_node_pool" "primary_ml" {`
`57`	`57`	`"https://www.googleapis.com/auth/devstorage.read_only"`
`58`	`58`	`]`
`59`	`59`	`workload_metadata_config {`
`60`		`- node_metadata = "SECURE"`
	`60`	`+ mode = "UNSPECIFIED"`
`61`	`61`	`}`
`62`	`62`	`guest_accelerator {`
`63`	`63`	`type = var.gcp_gpu`