fix(deps)!: Update Terraform terraform-google-modules/kubernetes-engine/google to v35

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
terraform-google-modules/kubernetes-engine/google (source)	module	major	~> 14.0.1 -> ~> 35.0.0
terraform-google-modules/kubernetes-engine/google (source)	module	major	~> 14.1 -> ~> 35.0

---

Release Notes

terraform-google-modules/terraform-google-kubernetes-engine (terraform-google-modules/kubernetes-engine/google)

v35.0.0

Compare Source

⚠ BREAKING CHANGES

• master_ipv4_cidr_block optional for private standard clusters (#​2186)
• TPG>=6.11: add endpoint_dns (#​2180)
• update-variant: allow updating disk_type, disk_size_gb, machine_type, enable_gcfs in place (#​2195)
• TPG>=6.8.0: add KCP log params (#​2166)
• private-cluster: use private endpoint (#​2189)
• Change the default value of "monitoring_enable_managed_prometheus" var to null (#​2188)
• TPG>=6.5.0: promote enable_gcfs to GA (#​2178)
• TPG>=6.7.0: promote secret_manager_config to GA (#​2159)
• TPG>=6.5.0: support gcp_filestore_csi_driver_config for autopilot (#​2126)

Features

• add logging_config and monitoring_config to autopilot modules (#​2155) (0ebdfda)
• Change the default value of "monitoring_enable_managed_prometheus" var to null (#​2188) (31a1619)
• deps: Update Terraform Google Provider to >= 6.7.0, < 6.11.0 (#​2184) (d73e2e9)
• master_ipv4_cidr_block optional for private standard clusters (#​2186) (e0ea8e7)
• Node pools can enable fast_socket (#​2200) (f23d52f)
• promote additive_vpc_scope_dns_domain to GA (#​2194) (43d1c56)
• TPG>=6.11: add endpoint_dns (#​2180) (1f85f66)
• TPG>=6.5.0: promote enable_gcfs to GA (#​2178) (eb9b0be)
• TPG>=6.5.0: support gcp_filestore_csi_driver_config for autopilot (#​2126) (e3f016e)
• TPG>=6.7.0: promote secret_manager_config to GA (#​2159) (7931bf4)
• TPG>=6.8.0: add KCP log params (#​2166) (9a1f4ea)
• update-variant: allow updating disk_type, disk_size_gb, machine_type, enable_gcfs in place (#​2195) (276cbdb)

Bug Fixes

• enable TPG v6.11+ (#​2197) (e9ab0df)
• limit TPG < 6.10 (#​2183) (3122b9d)
• node pool options cannot be set to false (#​2187) (752db66)
• private-cluster: use private endpoint (#​2189) (4b155cd)
• standardize to >= TF v1.3 (#​2202) (a99aec2)
• TPG>=5.12.0: Bump for #​2142 (#​2141) (#​2170) (52f8bea)

v34.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>=5.44.2: add standard cluster support for insecureKubeletReadonlyPortEnabled (#​2082)
• deps: Update Terraform terraform-google-modules/project-factory/google to v17 (#​2109)

Features

• Add create_ignore_already_exists to workload_identity (#​2142) (76d779c)
• safer-cluster: add create_service_account variable (#​2138) (cccabcb)
• TPG>=5.44.2: add standard cluster support for insecureKubeletReadonlyPortEnabled (#​2082) (96626d5)

Bug Fixes

• add kubelet_config to default-pool (#​2147) (7828a0f)
• add target tags to node_pool_auto_config for standard clusters (#​2118) (d5f66e8)
• correct confidential node field name (#​2140) (373c969)
• deps: Update Terraform terraform-google-modules/project-factory/google to v17 (#​2109) (3073b04)
• fix typo in kube-dns-upstream-nameservers configmap (#​2149) (843c56c)
• node_pools: Update Variants: Add recreate for secondary_boot_disk and local_ssd_ephemeral_count (beta) (#​2139) (66231d5)
• remove dns from autopilot (#​2152) (2e645cd)
• remove unnecessary lookup for safer_cluster nodepool ID (#​2160) (179a8ec)
• send provider enum values for insecureKubeletReadonlyPortEnabled (#​2145) (922ab1d)
• update resource names to snake_case (#​2151) (375d27c)

v33.1.0

Compare Source

Features

• add a flag to allow access through Google Cloud public IP addresses (#​2078) (2f412bb)
• added confidential-nodes flag for node-pools (#​2110) (b2a597b)
• enable L4 ILB subsetting support for safer clusters (#​2105) (0733908)

Bug Fixes

• acm: correct membership location (#​2128) (7cf9894)
• acm: use membership registration location (#​2123) (caa194f)
• allow changing enable_identity_service value in place (#​2132) (9c2191e)
• allow null enable_gcfs setting in defined nodepools (#​2111) (700a01d)
• autopilot: narrow version exclusion (#​2112) (620bf32)
• ignore control plane network when private endpoint subnet is set (#​2122) (a4b130d)

v33.0.4

Compare Source

Bug Fixes

• TPG < 6.2 for Autopilot (#​2101) (bff49e1)

v33.0.3

Compare Source

Bug Fixes

• correct gcfs_config value (#​2095) (1b7a845)

v33.0.2

Compare Source

Bug Fixes

• asm and auth allow TPGv6 (#​2092) (0ce1df6)
• no gcfs block when enable_gcfs null (#​2093) (f4c1af2)

v33.0.1

Compare Source

Bug Fixes

• avoid TPG v6.2.0 with Autopilot (#​2086) (fdd1287)

v33.0.0

Compare Source

⚠ BREAKING CHANGES

• beta-autopilot: enable gcfs by default (#​2066)
• TPG>=5.41: add config_sync.enabled (#​2074)
• update relay_mode to enable_relay (#​2067)
• private_cluster: enable private nodes by default (#​2064)
• deps: Update Terraform terraform-google-modules/project-factory/google to v16 (#​2057)

Features

• beta-autopilot: enable gcfs by default (#​2066) (a083437)
• deps: Update Terraform Google Provider to v6 (major) (#​2063) (8b7e342)
• private_cluster: enable private nodes by default (#​2064) (e11787c)
• support reservation affinity (#​2010) (7cc0626)

Bug Fixes

• avoid TPGv5.44.0 with Autopilot (#​2076) (f54d2e1)
• deps: Update Terraform terraform-google-modules/project-factory/google to v16 (#​2057) (8e53122)
• Node Pool enable_gcfs true:false (#​1976) (419078d)
• TPG>=5.41: add config_sync.enabled (#​2074) (4939c6f)
• update relay_mode to enable_relay (#​2067) (dafdd72)

v32.0.4

Compare Source

Bug Fixes

• allow enable_private_endpoint with no master_authorized_networks (#​2058) (528b373)

v32.0.3

Compare Source

Bug Fixes

• autopilot: option to configure gcfs (#​2052) (c1a720a)

v32.0.2

Compare Source

Bug Fixes

• autopilot: ignore gcfs null (#​2049) (5e0de62)

v32.0.1

Compare Source

Bug Fixes

• fleet_app_operator_permissions: enable multi use per project (#​2045) (a83100d)
• fleet_app_operator_permissions: optional groups and users (#​2044) (a5a67e5)
• gcfs AP diff and general cleanup (#​2043) (ec42a18)
• remove duplicte enable_secure_boot (#​2040) (d469973)

v32.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>=5.40.0: Add support for RayOperator Addon (#​2032)
• TPG>=5.33: add secret manager add-on config to beta modules (#​1977)

Features

• Add additional functionality for autopilot clusters (#​1985) (3b0bbe8)
• add notification event filter (#​1996) (9ff1b5e)
• add optional private_endpoint_subnetwork variable in private submodules (#​2009) (7a2e9b8)
• add support for logging_variant in Autopilot clusters (#​1962) (08028a8)
• add support for additive_vpc_scope_dns_domain (#​1998) (b54b7ba)
• add support for confidential storage + docs fixes (#​2003) (270a5c7)
• allow default node pools metadata key-value pairs to be disabled (#​2005) (318f38f)
• anthos modules remote fleet project (#​1995) (674f772)
• bump enable_intranode_visibility to GA (#​1956) (4274b0e)
• bump identity_service_config to ga (#​1997) (9d6a400)
• bump kubelet config to ga + minor doc fixes (#​1994) (6bd1bc1)
• cluster.tf: add support for setting cgroup mode (#​2001) (3fc4db4)
• enable binauthz for autopilot (#​2030) (3ebf04a)
• extend enable_secret_manager_addon to beta-autopilot clusters (#​2017) (7f31e96)
• Fleet app operator permissions (#​1986) (e0fd03a)
• support enable_nested_virtualization (#​2012) (e298e74)
• support workload_identity_config on autopilot (#​2011) (b4f2e14)
• TPG>=5.33: add secret manager add-on config to beta modules (#​1977) (5c58d89)
• TPG>=5.40.0: Add support for RayOperator Addon (#​2032) (c046af1)

Bug Fixes

• add missing gpu node pool param docs (#​2023) (ac76d4d)
• empty addons_config handling (#​1978) (9ae8b38)
• enable_confidential_storage fix (#​2018) (12cfe5e)
• skip service account random_string when not needed (#​2024) (be88d19)

v31.1.0

Compare Source

Features

• Add enable_cilium_clusterwide_network_policy support (#​1972) (72cf873)
• Add enable_l4_ilb_subsetting for autopilot clusters (#​1969) (c48dc6e)
• add pod_pids_limit for kubelet_config in all modules, example and autogen (#​1922) (eec38a2)
• Adding extra permissions to the cluster's default service account (#​1943) (4fab404)
• Set boot_disk_kms_key cluster wide and for cluster_autoscaling (#​1959) (654868e)

Bug Fixes

• avoid auto_provisioning_defaults drift (#​1806) (0005ab9)
• firewall rules for autopilot clusters are ineffective. add cluster_network_tag to autopilot cluster network_tags if firewalls are toggled on (#​1817) (e7b20cd)
• Fix the value of output "identity_service_enabled" in beta modules (#​1982) (a6210fc)

v31.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>=5.25.0: bump for #​1948 (#​1955)
• TPG>=5.21: add queued_provisioning (#​1950)
• TPG>=5.25.0: Add support for StatefulHA Addon (#​1948)
• deps: Update Terraform terraform-google-modules/project-factory/google to v15 (#​1936)

Features

• Add local_ssd_ephemeral_count to default configuration (#​1944) (04ebd0c)
• add missing dns_cache output in non beta (#​1864) (3d5cc9f)
• Add option image_type in cluster_autoscaling block (#​1905) (2272164)
• Add secondary_boot_disks to node_pool configuration. (#​1946) (11bae67)
• add security posture VULNERABILITY_ENTERPRISE (#​1947) (c48c8ab)
• add support for gpu_sharing_config on nodepool (#​1874) (b57387c)
• Add threads_per_core setting for node config in node pools (#​1942) (e573ced)
• Add upgrade_settings for NAP created node pools (#​1908) (c87bb41)
• TPG>=5.21: add queued_provisioning (#​1950) (c87333b)
• TPG>=5.25.0: Add support for StatefulHA Addon (#​1948) (acbb453)

Bug Fixes

• add gpu_driver_version to recreate list + docs (#​1913) (12cf40f)
• deps: Update Terraform terraform-google-modules/project-factory/google to v15 (#​1936) (d01e5bc)
• docs: remove beta from docs from non beta arguments (#​1957) (3de63b3)
• dynamic block ephemeral_storage_local_ssd_config (#​1951) (26eb7c0)
• local nvme ssd count (#​1937) (dbd90e3)
• TPG>=5.25.0: bump for #​1948 (#​1955) (b12c2e7)

v30.3.0

Compare Source

Features

• add enable_l4_ilb_subsetting for GA TPG (#​1924) (da0476a)
• adds local_nvme_ssd_block_config to beta-public-cluster (#​1912) (f7c2ed9)
• network tags for autoprovisioned node pools (#​1920) (f864e8a)
• safer-clusters: add components selection for monitoring (#​1851) (15b472f)

Bug Fixes

• make master_ipv4_cidr_block optional for autopilot (#​1902) (af43bdd)

v30.2.0

Compare Source

Features

• add cross project fleet service agent (#​1896) (59d36b9)

v30.1.0

Compare Source

Features

• add direct fleet registration option (#​1878) (6b267bd)
• add optional membership_location to fleet-membership (#​1860) (163de39)

Bug Fixes

• handle missing fleet membership and extend asm timeout (#​1880) (22896b0)

v30.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>=5.9: cluster autoscaling profile is GA (#​1839)
• Update least privilege default service account (#​1844)
• TPG>=5.6: use hub membership location for output (#​1824)
• Revert create least privilege default service account (#​1757) (#​1827)
• TF>=1.1: Configure ASM management mode (#​1702)

Features

• add advanced datapath observability config option (#​1776) (90e9bdf)
• Add support for configuring allow_net_admin in autopilot clusters (#​1768) (493149d)
• add support for pod_range in private cluster (#​1803) (9c62f1f)
• dual stack (IPV4_IPV6) support (#​1818) (d6cb390)
• Make confidential_nodes GA (#​1815) (322a5ee)
• promote tpu to ga (#​1856) (ba78819)
• TF>=1.1: Configure ASM management mode (#​1702) (a9de2d7)
• TPG>=5.6: use hub membership location for output (#​1824) (13e79af)
• TPG>=5.9: cluster autoscaling profile is GA (#​1839) (495623e)
• Update least privilege default service account (#​1844) (c63aa4f)
• workload-identity: Allow passing Google Service Account display_name and description (#​1834) (b387621)

Bug Fixes

• Add project ID to the fleet feature membership for ASM (#​1832) (1835f80)
• alpha option for cluster creation (#​1796) (67b67f3)
• CI: extend wait time for ACM (#​1861) (3d840c0)
• Do not ignore "mesh_id" label on "google_container_cluster" resource (#​1836) (95641a6)
• Revert create least privilege default service account (#​1757) (#​1827) (0d7f638)

v29.0.0

Compare Source

⚠ BREAKING CHANGES

• TPGv5: update to TPG v5 (#​1761)
• align keepers with ForceNew: true fields (#​1698)
• Create least privilege default service account (#​1757)
• acm: remove direct kubectl commands (#​1751)
• TPG>=4.81.0: add fqdn policies (#​1729)
• enabling vulnerability and audit modes for workloads (#​1749)
• support for enabling image streaming at cluster level (#​1696)
• make promethus configurable (#​1715)
• Add support for additional pod secondary ranges at the cluster level (#​1738)

Features

• acm: remove direct kubectl commands (#​1751) (4c27a6a)
• add security posture (#​1750) (5d959a6)
• Add support for additional pod secondary ranges at the cluster level (#​1738) (cebc213)
• add support for gpu_driver_installation_config on nodepool (#​1767) (f43a241)
• align keepers with ForceNew: true fields (#​1698) (3181f6c)
• Create least privilege default service account (#​1757) (350faa7)
• enabling vulnerability and audit modes for workloads (#​1749) (7bfd6fe)
• make promethus configurable (#​1715) ([ae26016](https://redirect.github.com/terraform-google-modules/terraform-google-kubernetes-engine/c

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun