feat(google_gke): add disable_snat_status flag (#82)

mozilla · Feb 3, 2023 · 22c9e57 · 22c9e57
1 parent e2bdc61
commit 22c9e57
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/google_gke/cluster.tf b/google_gke/cluster.tf
@@ -38,6 +38,10 @@ resource "google_container_cluster" "primary" {
     }
   }
 
+  default_snat_status {
+    disabled = var.disable_snat_status
+  }
+
   # Networking: Defaulting to Shared VPC Setup
   network         = local.network
   subnetwork      = local.subnetwork

diff --git a/google_gke/variables.tf b/google_gke/variables.tf
@@ -84,6 +84,12 @@ variable "enable_dataplane" {
   type        = bool
 }
 
+variable "disable_snat_status" {
+  default     = false
+  description = "Whether the cluster disables default in-node sNAT rules. Defaults to false."
+  type        = bool
+}
+
 variable "shared_vpc_outputs" {
   default     = null
   description = "Sets networking-related variables based on a homegrown Shared VPC Terraform outputs data structure."