feat(gke): add mesh samples

Author: apeabody

build/int.cloudbuild.yaml

@@ -31,27 +31,28 @@ steps:
       git diff origin/main --name-only > _changed_files
       sed 's:[^/]*$::' _changed_files > _changed_folders
       sort -u -o _changed_folders{,}
-      echo Folders with changes:
+      echo "Folders with changes:"
       cat _changed_folders
 
       # Do not prune if changing tests themselves
       while read d; do
-        if [[ "build test .github" =~ "${d%/}" ]]; then
+        if [[ "test .github" =~ "${d%/}" ]]; then
           echo "Infrastructure folder ${d%/} has changed; no tests will be pruned."
           exit 0 # do not prune
         fi
       done < _changed_folders
 
       # Remove base folders without changes
       for d in *; do
-          if ! grep -q "^$d$" _changed_folders && [[ "$d" != "test" ]]; then
+          if ! (grep -q "^$d" _changed_folders || [[ "test _changed_folders" =~ "$d" ]]); then
             rm -rf $d;
           fi
       done
 
       # Remove leaf folders without changes or non-tf resources
       for d in `find . -type d -name 'test' -prune -o -links 2 -printf '%P\n'`; do
           if ! grep -q "^$d" _changed_folders && ! [ -n "$(find $d -maxdepth 1 -not -name '*.tf' -and -not -name 'test.yaml' -type f -print -quit)" ]; then
+            echo "Removing leaf folder: $d"
             rm -rf $d
           fi
       done
@@ -60,8 +61,8 @@ steps:
       find . -empty -type d -delete
 
       # Report remaining folders
-      echo Folders in scope for tests:
-      find . -type d -printf '%P\n'
+      echo -n "Folders in scope for tests:"
+      find . -type d -name ".*" -prune -printf '%P\n'
 
 - id: prepare
   name: 'gcr.io/cloud-foundation-cicd/$_DOCKER_IMAGE_DEVELOPER_TOOLS:$_DOCKER_TAG_VERSION_DEVELOPER_TOOLS'

gke/autopilot/mesh/main.tf

@@ -0,0 +1,52 @@
+/**
+* Copyright 2025 Google LLC
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+# [START gke_autopilot_mesh]
+data "google_project" "default" {}
+
+resource "google_container_cluster" "default" {
+  name     = "gke-autopilot-mesh"
+  location = "us-central1"
+
+  enable_autopilot = true
+
+  fleet {
+    project = data.google_project.default.project_id
+  }
+
+  # Set `deletion_protection` to `true` will ensure that one cannot
+  # accidentally delete this instance by use of Terraform.
+  deletion_protection = false
+}
+
+resource "google_gke_hub_feature" "default" {
+  name     = "servicemesh"
+  location = "global"
+}
+
+
+resource "google_gke_hub_feature_membership" "default" {
+  location = "global"
+
+  feature             = google_gke_hub_feature.default.name
+  membership          = google_container_cluster.default.fleet[0].membership_id
+  membership_location = google_container_cluster.default.fleet[0].membership_location
+
+  mesh {
+    management = "MANAGEMENT_AUTOMATIC"
+  }
+}
+# [END gke_autopilot_mesh]

gke/enterprise/mesh/main.tf

@@ -0,0 +1,28 @@
+/**
+* Copyright 2025 Google LLC
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+# [START gke_enterprise_mesh]
+resource "google_gke_hub_feature" "default" {
+  name     = "servicemesh"
+  location = "global"
+
+  fleet_default_member_config {
+    mesh {
+      management = "MANAGEMENT_AUTOMATIC"
+    }
+  }
+}
+# [END gke_enterprise_mesh]