From 3396b99402f2d35dbeba3df7ec5aa96b50035afc Mon Sep 17 00:00:00 2001 From: Aleksey Koloskov Date: Sun, 12 Jan 2020 11:08:48 +0300 Subject: [PATCH] Fix enable_legacy_abac issue #79 --- modules/gke-cluster/main.tf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/modules/gke-cluster/main.tf b/modules/gke-cluster/main.tf index 9cfff53..ac66e46 100644 --- a/modules/gke-cluster/main.tf +++ b/modules/gke-cluster/main.tf @@ -32,6 +32,9 @@ resource "google_container_cluster" "cluster" { monitoring_service = var.monitoring_service min_master_version = local.kubernetes_version + # Whether to enable legacy Attribute-Based Access Control (ABAC). RBAC has significant security advantages over ABAC. + enable_legacy_abac = var.enable_legacy_abac + # The API requires a node pool or an initial count to be defined; that initial count creates the # "default node pool" with that # of nodes. # So, we need to set an initial_node_count of 1. This will make a default node