feat: enable group for rbac gke

GoogleCloudPlatform · Feb 20, 2024 · bd2ea52 · bd2ea52
1 parent 01ca0d3
commit bd2ea52
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/solutions/gke/configconnector/gke-cluster-autopilot/gke.yaml b/solutions/gke/configconnector/gke-cluster-autopilot/gke.yaml
@@ -103,3 +103,6 @@ spec:
     name: project-id-cluster-name-snet # kpt-set: ${project-id}-${cluster-name}-snet
   verticalPodAutoscaling:
     enabled: true
+  # Enable google group for rbac authentication in GKE  
+  authenticatorGroupsConfig:
+    securityGroup: [email protected] # kpt-set: ${security-group}
diff --git a/solutions/gke/configconnector/gke-cluster-autopilot/setters.yaml b/solutions/gke/configconnector/gke-cluster-autopilot/setters.yaml
@@ -124,6 +124,7 @@ data:
   networktags-enabled: false
   networktags:
     - ids
+  security-group: gke-security-groups@<yourdomain.com> # Just change the domain name to match the organization name. Do not change the prefix gke-security-groups   
   #
   ##########################
   # Config Sync