Add feature to define individual oauth scopes to node pools

README.md

@@ -44,6 +44,14 @@ module "gke" {
     },
   ]
 
+  node_pools_oauth_scopes = {
+    all     = []
+
+    default-node-pool = [
+      "https://www.googleapis.com/auth/cloud-platform",
+    ]
+  }
+
   node_pools_labels = {
     all = {}
 

cluster_regional.tf

@@ -123,9 +123,7 @@ resource "google_container_node_pool" "pools" {
     service_account = "${lookup(var.node_pools[count.index], "service_account", local.service_account)}"
     preemptible     = "${lookup(var.node_pools[count.index], "preemptible", false)}"
 
-    oauth_scopes = [
-      "https://www.googleapis.com/auth/cloud-platform",
-    ]
+    oauth_scopes = ["${concat(var.node_pools_oauth_scopes["all"], var.node_pools_oauth_scopes[lookup(var.node_pools[count.index], "name")])}"]
   }
 
   lifecycle {

cluster_zonal.tf

@@ -123,9 +123,7 @@ resource "google_container_node_pool" "zonal_pools" {
     service_account = "${lookup(var.node_pools[count.index], "service_account", local.service_account)}"
     preemptible     = "${lookup(var.node_pools[count.index], "preemptible", false)}"
 
-    oauth_scopes = [
-      "https://www.googleapis.com/auth/cloud-platform",
-    ]
+    oauth_scopes = ["${concat(var.node_pools_oauth_scopes["all"], var.node_pools_oauth_scopes[lookup(var.node_pools[count.index], "name")])}"]
   }
 
   lifecycle {

examples/node_pool/main.tf

@@ -63,6 +63,14 @@ module "gke" {
     },
   ]
 
+  node_pools_oauth_scopes = {
+    all     = []
+
+    pool-01 = []
+
+    pool-02 = []
+  }
+
   node_pools_metadata = {
     all = {}
 

variables.tf

@@ -175,6 +175,16 @@ variable "node_pools_tags" {
   }
 }
 
+variable "node_pools_oauth_scopes" {
+  type        = "map"
+  description = "Map of lists containing node oauth scopes by node-pool name"
+
+  default = {
+    all               = ["https://www.googleapis.com/auth/cloud-platform"]
+    default-node-pool = []
+  }
+}
+
 variable "stub_domains" {
   type        = "map"
   description = "Map of stub domains and their resolvers to forward DNS queries for a certain domain to an external DNS server"