feat(containerattached): Add security_posture_config (#11516)

Author: hdp617

mmv1/products/containerattached/Cluster.yaml

@@ -355,3 +355,17 @@ properties:
             required: true
             description: |
               Namespace of the kubernetes secret containing the proxy config.
+  - !ruby/object:Api::Type::NestedObject
+    name: securityPostureConfig
+    description: |
+      Enable/Disable Security Posture API features for the cluster.
+    default_from_api: true
+    properties:
+      - !ruby/object:Api::Type::Enum
+        name: vulnerabilityMode
+        required: true
+        description: |
+          Sets the mode of the Kubernetes security posture API's workload vulnerability scanning.
+        values:
+          - :VULNERABILITY_DISABLED
+          - :VULNERABILITY_ENTERPRISE

mmv1/templates/terraform/examples/container_attached_cluster_full.tf.erb

@@ -46,4 +46,7 @@ resource "google_container_attached_cluster" "primary" {
       namespace = "default"
     }
   }
+  security_posture_config {
+    vulnerability_mode = "VULNERABILITY_ENTERPRISE"
+  }
 }

mmv1/templates/terraform/pre_update/containerattached_update.go.erb

@@ -19,9 +19,12 @@ if d.HasChange("proxy_config") {
     newUpdateMask = append(newUpdateMask, "proxy_config.kubernetes_secret.name")
     newUpdateMask = append(newUpdateMask, "proxy_config.kubernetes_secret.namespace")
 }
+if d.HasChange("security_posture_config") {
+    newUpdateMask = append(newUpdateMask, "security_posture_config.vulnerability_mode")
+}
 // Pull out any other set fields from the generated mask.
 for _, mask := range updateMask {
-    if mask == "authorization" || mask == "loggingConfig" || mask == "monitoringConfig" || mask == "binaryAuthorization" || mask == "proxyConfig" {
+    if mask == "authorization" || mask == "loggingConfig" || mask == "monitoringConfig" || mask == "binaryAuthorization" || mask == "proxyConfig" || mask == "securityPostureConfig" {
         continue
     }
     newUpdateMask = append(newUpdateMask, mask)

mmv1/third_party/terraform/services/containerattached/resource_container_attached_cluster_update_test.go

@@ -118,6 +118,9 @@ resource "google_container_attached_cluster" "primary" {
       namespace = "default"
     }
   }
+  security_posture_config {
+    vulnerability_mode = "VULNERABILITY_ENTERPRISE"
+  }
 }
 `, context)
 }
@@ -166,6 +169,9 @@ resource "google_container_attached_cluster" "primary" {
       namespace = "custom-ns"
     }
   }
+  security_posture_config {
+    vulnerability_mode = "VULNERABILITY_DISABLED"
+  }
   lifecycle {
     prevent_destroy = true
   }
@@ -312,6 +318,9 @@ resource "google_container_attached_cluster" "primary" {
       namespace = "custom-ns"
     }
   }
+  security_posture_config {
+    vulnerability_mode = "VULNERABILITY_DISABLED"
+  }
 }
 `, context)
 }