fix: Add the nodepool cgroup mode to the NAP config

davidholsgrove · davidholsgrove · commit b2ab65c33a33 · 2025-05-30T15:38:22.000+10:00
Closes #2321
diff --git a/autogen/main/cluster.tf.tmpl b/autogen/main/cluster.tf.tmpl
@@ -322,11 +322,18 @@ resource "google_container_cluster" "primary" {
 
 {% if autopilot_cluster != true %}
   dynamic "node_pool_auto_config" {
-    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules) ? [1] : []
+    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules || local.node_pools_cgroup_mode != null) ? [1] : []
     content {
       network_tags {
         tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags
       }
+
+      dynamic "linux_node_config" {
+        for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []
+        content {
+          cgroup_mode = local.node_pools_cgroup_mode["all"]
+        }
+      }
     }
   }
 {% endif %}
diff --git a/cluster.tf b/cluster.tf
@@ -223,11 +223,18 @@ resource "google_container_cluster" "primary" {
   }
 
   dynamic "node_pool_auto_config" {
-    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules) ? [1] : []
+    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules || local.node_pools_cgroup_mode != null) ? [1] : []
     content {
       network_tags {
         tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags
       }
+
+      dynamic "linux_node_config" {
+        for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []
+        content {
+          cgroup_mode = local.node_pools_cgroup_mode["all"]
+        }
+      }
     }
   }
 
diff --git a/modules/beta-private-cluster-update-variant/cluster.tf b/modules/beta-private-cluster-update-variant/cluster.tf
@@ -242,11 +242,18 @@ resource "google_container_cluster" "primary" {
   }
 
   dynamic "node_pool_auto_config" {
-    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules) ? [1] : []
+    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules || local.node_pools_cgroup_mode != null) ? [1] : []
     content {
       network_tags {
         tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags
       }
+
+      dynamic "linux_node_config" {
+        for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []
+        content {
+          cgroup_mode = local.node_pools_cgroup_mode["all"]
+        }
+      }
     }
   }
 
diff --git a/modules/beta-private-cluster/cluster.tf b/modules/beta-private-cluster/cluster.tf
@@ -242,11 +242,18 @@ resource "google_container_cluster" "primary" {
   }
 
   dynamic "node_pool_auto_config" {
-    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules) ? [1] : []
+    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules || local.node_pools_cgroup_mode != null) ? [1] : []
     content {
       network_tags {
         tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags
       }
+
+      dynamic "linux_node_config" {
+        for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []
+        content {
+          cgroup_mode = local.node_pools_cgroup_mode["all"]
+        }
+      }
     }
   }
 
diff --git a/modules/beta-public-cluster-update-variant/cluster.tf b/modules/beta-public-cluster-update-variant/cluster.tf
@@ -242,11 +242,18 @@ resource "google_container_cluster" "primary" {
   }
 
   dynamic "node_pool_auto_config" {
-    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules) ? [1] : []
+    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules || local.node_pools_cgroup_mode != null) ? [1] : []
     content {
       network_tags {
         tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags
       }
+
+      dynamic "linux_node_config" {
+        for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []
+        content {
+          cgroup_mode = local.node_pools_cgroup_mode["all"]
+        }
+      }
     }
   }
 
diff --git a/modules/beta-public-cluster/cluster.tf b/modules/beta-public-cluster/cluster.tf
@@ -242,11 +242,18 @@ resource "google_container_cluster" "primary" {
   }
 
   dynamic "node_pool_auto_config" {
-    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules) ? [1] : []
+    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules || local.node_pools_cgroup_mode != null) ? [1] : []
     content {
       network_tags {
         tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags
       }
+
+      dynamic "linux_node_config" {
+        for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []
+        content {
+          cgroup_mode = local.node_pools_cgroup_mode["all"]
+        }
+      }
     }
   }
 
diff --git a/modules/private-cluster-update-variant/cluster.tf b/modules/private-cluster-update-variant/cluster.tf
@@ -223,11 +223,18 @@ resource "google_container_cluster" "primary" {
   }
 
   dynamic "node_pool_auto_config" {
-    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules) ? [1] : []
+    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules || local.node_pools_cgroup_mode != null) ? [1] : []
     content {
       network_tags {
         tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags
       }
+
+      dynamic "linux_node_config" {
+        for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []
+        content {
+          cgroup_mode = local.node_pools_cgroup_mode["all"]
+        }
+      }
     }
   }
 
diff --git a/modules/private-cluster/cluster.tf b/modules/private-cluster/cluster.tf
@@ -223,11 +223,18 @@ resource "google_container_cluster" "primary" {
   }
 
   dynamic "node_pool_auto_config" {
-    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules) ? [1] : []
+    for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 || var.add_cluster_firewall_rules || local.node_pools_cgroup_mode != null) ? [1] : []
     content {
       network_tags {
         tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags
       }
+
+      dynamic "linux_node_config" {
+        for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []
+        content {
+          cgroup_mode = local.node_pools_cgroup_mode["all"]
+        }
+      }
     }
   }
 

Original file line number	Diff line number	Diff line change
`@@ -322,11 +322,18 @@ resource "google_container_cluster" "primary" {`
`322`	`322`
`323`	`323`	`{% if autopilot_cluster != true %}`
`324`	`324`	`dynamic "node_pool_auto_config" {`
`325`		`- for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 \|\| var.add_cluster_firewall_rules) ? [1] : []`
	`325`	`+ for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 \|\| var.add_cluster_firewall_rules \|\| local.node_pools_cgroup_mode != null) ? [1] : []`
`326`	`326`	`content {`
`327`	`327`	`network_tags {`
`328`	`328`	`tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags`
`329`	`329`	`}`
	`330`	`+`
	`331`	`+ dynamic "linux_node_config" {`
	`332`	`+ for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []`
	`333`	`+ content {`
	`334`	`+ cgroup_mode = local.node_pools_cgroup_mode["all"]`
	`335`	`+ }`
	`336`	`+ }`
`330`	`337`	`}`
`331`	`338`	`}`
`332`	`339`	`{% endif %}`
Original file line number	Diff line number	Diff line change
`@@ -223,11 +223,18 @@ resource "google_container_cluster" "primary" {`
`223`	`223`	`}`
`224`	`224`
`225`	`225`	`dynamic "node_pool_auto_config" {`
`226`		`- for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 \|\| var.add_cluster_firewall_rules) ? [1] : []`
	`226`	`+ for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 \|\| var.add_cluster_firewall_rules \|\| local.node_pools_cgroup_mode != null) ? [1] : []`
`227`	`227`	`content {`
`228`	`228`	`network_tags {`
`229`	`229`	`tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags`
`230`	`230`	`}`
	`231`	`+`
	`232`	`+ dynamic "linux_node_config" {`
	`233`	`+ for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []`
	`234`	`+ content {`
	`235`	`+ cgroup_mode = local.node_pools_cgroup_mode["all"]`
	`236`	`+ }`
	`237`	`+ }`
`231`	`238`	`}`
`232`	`239`	`}`
`233`	`240`
Original file line number	Diff line number	Diff line change
`@@ -242,11 +242,18 @@ resource "google_container_cluster" "primary" {`
`242`	`242`	`}`
`243`	`243`
`244`	`244`	`dynamic "node_pool_auto_config" {`
`245`		`- for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 \|\| var.add_cluster_firewall_rules) ? [1] : []`
	`245`	`+ for_each = var.cluster_autoscaling.enabled && (length(var.network_tags) > 0 \|\| var.add_cluster_firewall_rules \|\| local.node_pools_cgroup_mode != null) ? [1] : []`
`246`	`246`	`content {`
`247`	`247`	`network_tags {`
`248`	`248`	`tags = var.add_cluster_firewall_rules ? (concat(var.network_tags, [local.cluster_network_tag])) : var.network_tags`
`249`	`249`	`}`
	`250`	`+`
	`251`	`+ dynamic "linux_node_config" {`
	`252`	`+ for_each = local.node_pools_cgroup_mode["all"] != "" ? [1] : []`
	`253`	`+ content {`
	`254`	`+ cgroup_mode = local.node_pools_cgroup_mode["all"]`
	`255`	`+ }`
	`256`	`+ }`
`250`	`257`	`}`
`251`	`258`	`}`
`252`	`259`