feat: add support for custom monitoring metrics writer role

main.tf

@@ -21,11 +21,16 @@
  *****************************************/
 data "google_compute_zones" "available" {
   count = local.zone_count == 0 ? 1 : 0
+}
 
-  provider = google
+provider "google" {
+  project = "rare-style-447407-s1"
+  region  = "us-central1"
+}
 
-  project = var.project_id
-  region  = local.region
+provider "google-beta" {
+  project = "rare-style-447407-s1"
+  region  = "us-central1"
 }
 
 resource "random_shuffle" "available_zones" {

modules/beta-private-cluster/sa.tf

@@ -56,7 +56,7 @@ resource "google_project_iam_member" "cluster_service_account_node_service_accou
 resource "google_project_iam_member" "cluster_service_account_metric_writer" {
   count   = var.create_service_account ? 1 : 0
   project = google_service_account.cluster_service_account[0].project
-  role    = "roles/monitoring.metricWriter"
+  role    = var.monitoring_metric_writer_role
   member  = google_service_account.cluster_service_account[0].member
 }
 

modules/beta-private-cluster/variables.tf

@@ -968,3 +968,9 @@ variable "fleet_project_grant_service_agent" {
   type        = bool
   default     = false
 }
+
+variable "monitoring_metric_writer_role" {
+  description = "The monitoring metrics writer role to assign to the GKE node service account"
+  type        = string
+  default     = "roles/monitoring.metricWriter"
+}

test-implementation/main.tf

@@ -0,0 +1,11 @@
+module "gke" {
+  source                        = "../modules/beta-private-cluster"
+  project_id                    = "rare-style-447407-s1"
+  name                          = "test-custom-role"
+  region                        = "us-central1"
+  network                       = "default"
+  subnetwork                    = "default"
+  ip_range_pods                 = "gke-pods"
+  ip_range_services             = "gke-services"
+  monitoring_metric_writer_role = "projects/rare-style-447407-s1/roles/custom_metrics_writer"
+}