move identity_service_config block outside addons_config (#9658) (#6765)

[upstream:1fc256b1e012c3d8a49b29c21cbd8c3531e2c1d2]

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

.changelog/9658.txt

@@ -0,0 +1,2 @@
+```release-note:none
+```

website/docs/r/container_cluster.html.markdown

@@ -345,6 +345,8 @@ subnetwork in which the cluster's instances are launched.
     [Google IAM Service Account](https://cloud.google.com/iam/docs/service-accounts#user-managed_service_accounts).
     Structure is [documented below](#nested_workload_identity_config).
 
+* `identity_service_config` - (Optional). Structure is [documented below](#nested_identity_service_config).
+
 * `enable_intranode_visibility` - (Optional)
     Whether Intra-node visibility is enabled for this cluster. This makes same node pod to pod traffic visible for VPC network.
 
@@ -426,8 +428,6 @@ Fleet configuration for the cluster. Structure is [documented below](#nested_fle
 * `istio_config` - (Optional, [Beta](https://terraform.io/docs/providers/google/guides/provider_versions.html)).
     Structure is [documented below](#nested_istio_config).
 
-* `identity_service_config` - (Optional). Structure is [documented below](#nested_identity_service_config).
-
 * `dns_cache_config` - (Optional).
     The status of the NodeLocal DNSCache addon. It is disabled by default.
     Set `enabled = true` to enable.