Add LKE Nodepool Isolation field

AGENTS.md

@@ -33,7 +33,8 @@
 - `NewClient` reads `LINODE_URL`, `LINODE_API_VERSION`, `LINODE_CA`, and `LINODE_DEBUG`; `NewClientFromEnv` prefers `LINODE_TOKEN` over config-file profiles.
 
 ## Conventions And Gotchas
-- Many option structs use `json:",omitzero"`; use pointers for fields that must serialize explicit zero values.
+- Optional fields in create or update options structs must use `json:",omitzero"`.
+- Optional fields in create or update options structs must be pointer types so explicit zero values can be serialized when needed.
 - List APIs mutate the supplied `*ListOptions` with `Page`, `Pages`, and `Results`; do not reuse one `ListOptions` across list calls.
 - Use `formatAPIPath` for endpoint paths with user-provided string path segments so path escaping matches the client helpers.
 - CI enforces PR titles like `TPT-1234: Description` unless labels exempt the PR (`dependencies`, `hotfix`, `community-contribution`, `ignore-for-release`).

lke_node_pools.go

@@ -59,6 +59,18 @@ type LKENodePoolTaint struct {
 	Effect LKENodePoolTaintEffect `json:"effect"`
 }
 
+// LKENodePoolIsolation controls network isolation for nodes in the pool.
+type LKENodePoolIsolation struct {
+	PublicIPv4 bool `json:"public_ipv4"`
+	PublicIPv6 bool `json:"public_ipv6"`
+}
+
+// LKENodePoolIsolationCreateOptions controls network isolation for node pool create requests.
+type LKENodePoolIsolationCreateOptions struct {
+	PublicIPv4 *bool `json:"public_ipv4,omitzero"`
+	PublicIPv6 *bool `json:"public_ipv6,omitzero"`
+}
+
 // LKENodePoolLabels represents Kubernetes labels to add to an LKENodePool
 type LKENodePoolLabels map[string]string
 
@@ -79,6 +91,9 @@ type LKENodePool struct {
 
 	DiskEncryption InstanceDiskEncryption `json:"disk_encryption,omitzero"`
 
+	// Isolation may not currently be available to all users.
+	Isolation *LKENodePoolIsolation `json:"isolation"`
+
 	// K8sVersion and UpdateStrategy are only for LKE Enterprise to support node pool upgrades.
 	// It may not currently be available to all users and is under v4beta.
 	K8sVersion     *string                    `json:"k8s_version,omitzero"`
@@ -101,6 +116,9 @@ type LKENodePoolCreateOptions struct {
 	Autoscaler *LKENodePoolAutoscaler `json:"autoscaler,omitzero"`
 	FirewallID *int                   `json:"firewall_id,omitzero"`
 
+	// Isolation may not currently be available to all users.
+	Isolation *LKENodePoolIsolationCreateOptions `json:"isolation,omitzero"`
+
 	// K8sVersion and UpdateStrategy only works for LKE Enterprise to support node pool upgrades.
 	// It may not currently be available to all users and is under v4beta.
 	K8sVersion     *string                    `json:"k8s_version,omitzero"`
@@ -141,6 +159,13 @@ func (l LKENodePool) GetCreateOptions() (o LKENodePoolCreateOptions) {
 	o.FirewallID = l.FirewallID
 	o.DiskEncryption = &l.DiskEncryption
 
+	if l.Isolation != nil {
+		o.Isolation = &LKENodePoolIsolationCreateOptions{
+			PublicIPv4: Pointer(l.Isolation.PublicIPv4),
+			PublicIPv6: Pointer(l.Isolation.PublicIPv6),
+		}
+	}
+
 	return o
 }
 

test/unit/firewalls_test.go

@@ -33,6 +33,7 @@ func TestFirewall_List(t *testing.T) {
 	assert.Equal(t, linodego.FirewallStatus("enabled"), firewall.Status)
 
 	assert.Equal(t, "DROP", firewall.Rules.InboundPolicy)
+	assert.Equal(t, 1, firewall.Rules.Version)
 	assert.Len(t, firewall.Rules.Inbound, 1)
 
 	inboundRule := firewall.Rules.Inbound[0]
@@ -120,6 +121,7 @@ func TestFirewall_Create(t *testing.T) {
 	assert.NotNil(t, firewall.Rules)
 	assert.Equal(t, "DROP", firewall.Rules.InboundPolicy)
 	assert.Equal(t, "DROP", firewall.Rules.OutboundPolicy)
+	assert.Equal(t, 1, firewall.Rules.Version)
 
 	assert.Len(t, firewall.Rules.Inbound, 1)
 	inboundRule := firewall.Rules.Inbound[0]
@@ -182,6 +184,7 @@ func TestFirewall_Get(t *testing.T) {
 	assert.NotNil(t, firewall.Rules)
 	assert.Equal(t, "DROP", firewall.Rules.InboundPolicy)
 	assert.Equal(t, "DROP", firewall.Rules.OutboundPolicy)
+	assert.Equal(t, 1, firewall.Rules.Version)
 
 	assert.Len(t, firewall.Rules.Inbound, 1)
 	inboundRule := firewall.Rules.Inbound[0]
@@ -236,6 +239,7 @@ func TestFirewall_Update(t *testing.T) {
 	assert.NotNil(t, firewall.Rules)
 	assert.Equal(t, "DROP", firewall.Rules.InboundPolicy)
 	assert.Equal(t, "DROP", firewall.Rules.OutboundPolicy)
+	assert.Equal(t, 1, firewall.Rules.Version)
 
 	assert.Len(t, firewall.Rules.Inbound, 1)
 	inboundRule := firewall.Rules.Inbound[0]

test/unit/fixtures/lke_node_pool_create.json

@@ -16,5 +16,9 @@
       "min": 1,
       "max": 5
     },
-    "label": "custom-label-create"
+    "label": "custom-label-create",
+    "isolation": {
+      "public_ipv4": true,
+      "public_ipv6": false
+    }
 }

test/unit/fixtures/lke_node_pool_get.json

@@ -9,6 +9,10 @@
       "enabled": true,
       "min": 1,
       "max": 5
+    },
+    "isolation": {
+      "public_ipv4": true,
+      "public_ipv6": false
     }
 }
 

test/unit/fixtures/lke_node_pool_update.json

@@ -9,5 +9,9 @@
       "min": 2,
       "max": 8
     },
-    "label": "custom-label-update"
+    "label": "custom-label-update",
+    "isolation": {
+      "public_ipv4": false,
+      "public_ipv6": true
+    }
 }

test/unit/lke_node_pools_test.go

@@ -74,6 +74,10 @@ func TestLKENodePool_Get(t *testing.T) {
 	assert.Equal(t, 3, nodePool.Count)
 	assert.Equal(t, []string{"tag1", "tag2"}, nodePool.Tags)
 	assert.Equal(t, []linodego.LockType{linodego.LockTypeCannotDelete}, nodePool.Locks)
+	if assert.NotNil(t, nodePool.Isolation) {
+		assert.True(t, nodePool.Isolation.PublicIPv4)
+		assert.False(t, nodePool.Isolation.PublicIPv6)
+	}
 }
 
 func TestLKENodePool_Create(t *testing.T) {
@@ -100,6 +104,10 @@ func TestLKENodePool_Create(t *testing.T) {
 			Max:     5,
 		},
 		Label: &label,
+		Isolation: &linodego.LKENodePoolIsolationCreateOptions{
+			PublicIPv4: Ptr(true),
+			PublicIPv6: Ptr(false),
+		},
 	}
 
 	base.MockPost("lke/clusters/123/pools", fixtureData)
@@ -112,6 +120,10 @@ func TestLKENodePool_Create(t *testing.T) {
 	assert.Equal(t, 1, nodePool.Autoscaler.Min)
 	assert.Equal(t, 5, nodePool.Autoscaler.Max)
 	assert.Equal(t, &label, nodePool.Label)
+	if assert.NotNil(t, nodePool.Isolation) {
+		assert.True(t, nodePool.Isolation.PublicIPv4)
+		assert.False(t, nodePool.Isolation.PublicIPv6)
+	}
 }
 
 func TestLKENodePool_Update(t *testing.T) {