fix(gke-cluster): evaluate major and minor gke slice versions securely

jamOne- · jamOne- · commit 79a2950e0c2d · 2026-03-23T13:40:15.000+01:00
diff --git a/modules/scheduler/gke-cluster/main.tf b/modules/scheduler/gke-cluster/main.tf
@@ -287,7 +287,7 @@ resource "google_container_cluster" "gke_cluster" {
     precondition {
       condition = (
         !var.enable_slice_controller ||
-        try(tonumber(regex("^1\\.([0-9]+)", local.master_version)[0]) >= 35, true)
+        try(tonumber(split(".", local.master_version)[0]) > 1 || (tonumber(split(".", local.master_version)[0]) == 1 && tonumber(split(".", local.master_version)[1]) >= 35), true)
       )
       error_message = "The GKE Slice Controller requires a GKE version of 1.35 or higher. Please update 'version_prefix' or 'min_master_version'."
     }

Original file line number	Diff line number	Diff line change
`@@ -287,7 +287,7 @@ resource "google_container_cluster" "gke_cluster" {`
`287`	`287`	`precondition {`
`288`	`288`	`condition = (`
`289`	`289`	`!var.enable_slice_controller \|\|`
`290`		`- try(tonumber(regex("^1\\.([0-9]+)", local.master_version)[0]) >= 35, true)`
	`290`	`+ try(tonumber(split(".", local.master_version)[0]) > 1 \|\| (tonumber(split(".", local.master_version)[0]) == 1 && tonumber(split(".", local.master_version)[1]) >= 35), true)`
`291`	`291`	`)`
`292`	`292`	`error_message = "The GKE Slice Controller requires a GKE version of 1.35 or higher. Please update 'version_prefix' or 'min_master_version'."`
`293`	`293`	`}`