chore(deps): update terraform terraform-google-modules/kubernetes-engine/google to v34

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
terraform-google-modules/kubernetes-engine/google (source)	module	major	~> 31.0 -> ~> 34.0

---

Release Notes

terraform-google-modules/terraform-google-kubernetes-engine (terraform-google-modules/kubernetes-engine/google)

v34.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>=5.44.2: add standard cluster support for insecureKubeletReadonlyPortEnabled (#​2082)
• deps: Update Terraform terraform-google-modules/project-factory/google to v17 (#​2109)

Features

• Add create_ignore_already_exists to workload_identity (#​2142) (76d779c)
• safer-cluster: add create_service_account variable (#​2138) (cccabcb)
• TPG>=5.44.2: add standard cluster support for insecureKubeletReadonlyPortEnabled (#​2082) (96626d5)

Bug Fixes

• add kubelet_config to default-pool (#​2147) (7828a0f)
• add target tags to node_pool_auto_config for standard clusters (#​2118) (d5f66e8)
• correct confidential node field name (#​2140) (373c969)
• deps: Update Terraform terraform-google-modules/project-factory/google to v17 (#​2109) (3073b04)
• fix typo in kube-dns-upstream-nameservers configmap (#​2149) (843c56c)
• node_pools: Update Variants: Add recreate for secondary_boot_disk and local_ssd_ephemeral_count (beta) (#​2139) (66231d5)
• remove dns from autopilot (#​2152) (2e645cd)
• remove unnecessary lookup for safer_cluster nodepool ID (#​2160) (179a8ec)
• send provider enum values for insecureKubeletReadonlyPortEnabled (#​2145) (922ab1d)
• update resource names to snake_case (#​2151) (375d27c)

v33.1.0

Compare Source

Features

• add a flag to allow access through Google Cloud public IP addresses (#​2078) (2f412bb)
• added confidential-nodes flag for node-pools (#​2110) (b2a597b)
• enable L4 ILB subsetting support for safer clusters (#​2105) (0733908)

Bug Fixes

• acm: correct membership location (#​2128) (7cf9894)
• acm: use membership registration location (#​2123) (caa194f)
• allow changing enable_identity_service value in place (#​2132) (9c2191e)
• allow null enable_gcfs setting in defined nodepools (#​2111) (700a01d)
• autopilot: narrow version exclusion (#​2112) (620bf32)
• ignore control plane network when private endpoint subnet is set (#​2122) (a4b130d)

v33.0.4

Compare Source

Bug Fixes

• TPG < 6.2 for Autopilot (#​2101) (bff49e1)

v33.0.3

Compare Source

Bug Fixes

• correct gcfs_config value (#​2095) (1b7a845)

v33.0.2

Compare Source

Bug Fixes

• asm and auth allow TPGv6 (#​2092) (0ce1df6)
• no gcfs block when enable_gcfs null (#​2093) (f4c1af2)

v33.0.1

Compare Source

Bug Fixes

• avoid TPG v6.2.0 with Autopilot (#​2086) (fdd1287)

v33.0.0

Compare Source

⚠ BREAKING CHANGES

• beta-autopilot: enable gcfs by default (#​2066)
• TPG>=5.41: add config_sync.enabled (#​2074)
• update relay_mode to enable_relay (#​2067)
• private_cluster: enable private nodes by default (#​2064)
• deps: Update Terraform terraform-google-modules/project-factory/google to v16 (#​2057)

Features

• beta-autopilot: enable gcfs by default (#​2066) (a083437)
• deps: Update Terraform Google Provider to v6 (major) (#​2063) (8b7e342)
• private_cluster: enable private nodes by default (#​2064) (e11787c)
• support reservation affinity (#​2010) (7cc0626)

Bug Fixes

• avoid TPGv5.44.0 with Autopilot (#​2076) (f54d2e1)
• deps: Update Terraform terraform-google-modules/project-factory/google to v16 (#​2057) (8e53122)
• Node Pool enable_gcfs true:false (#​1976) (419078d)
• TPG>=5.41: add config_sync.enabled (#​2074) (4939c6f)
• update relay_mode to enable_relay (#​2067) (dafdd72)

v32.0.4

Compare Source

Bug Fixes

• allow enable_private_endpoint with no master_authorized_networks (#​2058) (528b373)

v32.0.3

Compare Source

Bug Fixes

• autopilot: option to configure gcfs (#​2052) (c1a720a)

v32.0.2

Compare Source

Bug Fixes

• autopilot: ignore gcfs null (#​2049) (5e0de62)

v32.0.1

Compare Source

Bug Fixes

• fleet_app_operator_permissions: enable multi use per project (#​2045) (a83100d)
• fleet_app_operator_permissions: optional groups and users (#​2044) (a5a67e5)
• gcfs AP diff and general cleanup (#​2043) (ec42a18)
• remove duplicte enable_secure_boot (#​2040) (d469973)

v32.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>=5.40.0: Add support for RayOperator Addon (#​2032)
• TPG>=5.33: add secret manager add-on config to beta modules (#​1977)

Features

• Add additional functionality for autopilot clusters (#​1985) (3b0bbe8)
• add notification event filter (#​1996) (9ff1b5e)
• add optional private_endpoint_subnetwork variable in private submodules (#​2009) (7a2e9b8)
• add support for logging_variant in Autopilot clusters (#​1962) (08028a8)
• add support for additive_vpc_scope_dns_domain (#​1998) (b54b7ba)
• add support for confidential storage + docs fixes (#​2003) (270a5c7)
• allow default node pools metadata key-value pairs to be disabled (#​2005) (318f38f)
• anthos modules remote fleet project (#​1995) (674f772)
• bump enable_intranode_visibility to GA (#​1956) (4274b0e)
• bump identity_service_config to ga (#​1997) (9d6a400)
• bump kubelet config to ga + minor doc fixes (#​1994) (6bd1bc1)
• cluster.tf: add support for setting cgroup mode (#​2001) (3fc4db4)
• enable binauthz for autopilot (#​2030) (3ebf04a)
• extend enable_secret_manager_addon to beta-autopilot clusters (#​2017) (7f31e96)
• Fleet app operator permissions (#​1986) (e0fd03a)
• support enable_nested_virtualization (#​2012) (e298e74)
• support workload_identity_config on autopilot (#​2011) (b4f2e14)
• TPG>=5.33: add secret manager add-on config to beta modules (#​1977) (5c58d89)
• TPG>=5.40.0: Add support for RayOperator Addon (#​2032) (c046af1)

Bug Fixes

• add missing gpu node pool param docs (#​2023) (ac76d4d)
• empty addons_config handling (#​1978) (9ae8b38)
• enable_confidential_storage fix (#​2018) (12cfe5e)
• skip service account random_string when not needed (#​2024) (be88d19)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sourcery-ai]

Reviewer's Guide by Sourcery

This PR updates the Google Kubernetes Engine (GKE) Terraform module from version 31.x to 34.x. This is a major version update that includes several breaking changes, new features, and bug fixes related to GKE cluster configuration.

No diagrams generated as the changes look simple and do not need a visual representation.

File-Level Changes

Change	Details	Files
Major version update of the GKE Terraform module with breaking changes	Updated module version constraint from '> 31.0' to '> 34.0' Private nodes are now enabled by default for private clusters GCFS is enabled by default for beta-autopilot clusters Config sync configuration now requires 'enabled' field for TPG >= 5.41 Updated relay_mode parameter to enable_relay Updated project factory dependency to v17	01_infrastructure/main.tf

Possibly linked issues

• chore: Configure Renovate #1: The PR updates terraform-google-modules/kubernetes-engine/google, which is listed in the issue's open updates.

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time. You can also use
  this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[sourcery-ai]

We have skipped reviewing this pull request. It seems to have been created by a bot (hey, renovate[bot]!). We assume it knows what it's doing!