Add new fields in VMware and BareMetal cluster resources (#8681) (#15765)

* add upgrade_policy in vmware_cluster

* add disable_bundled_ingress in vmware_cluster

* add upgrade_policy field in bare_metal_cluster

* add binary_authorization field for bare_metal_cluster

* remove disable_bundled_ingress field as the API change it not yet released

* fix resource name conflicts in tests

* remove unspecified enum item

* Add new fields in update test

* fix yaml format

* Test the new fields changes in update test

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

.changelog/8681.txt

@@ -0,0 +1,6 @@
+```release-note:enhancement
+gkeonprem: added `upgrade_policy` field in `google_gkeonprem_vmware_cluster` resource (beta)
+```
+```release-note:enhancement
+gkeonprem: added `upgrade_policy` and `binary_authorization` fields in `google_gkeonprem_bare_metal_cluster` resource (beta)
+```

website/docs/r/gkeonprem_bare_metal_cluster.html.markdown

@@ -162,6 +162,12 @@ resource "google_gkeonprem_bare_metal_cluster" "cluster-manuallb" {
       }
     }
   }
+  binary_authorization {
+    evaluation_mode = "DISABLED"
+  }
+  upgrade_policy {
+    policy = "SERIAL"
+  }
 }
 ```
 ## Example Usage - Gkeonprem Bare Metal Cluster Bgplb
@@ -926,6 +932,16 @@ The following arguments are supported:
   Specifies the security related settings for the Bare Metal User Cluster.
   Structure is [documented below](#nested_security_config).
 
+* `binary_authorization` -
+  (Optional)
+  Binary Authorization related configurations.
+  Structure is [documented below](#nested_binary_authorization).
+
+* `upgrade_policy` -
+  (Optional)
+  The cluster upgrade policy.
+  Structure is [documented below](#nested_upgrade_policy).
+
 * `project` - (Optional) The ID of the project in which the resource belongs.
     If it is not provided, the provider project is used.
 
@@ -1007,6 +1023,21 @@ The following arguments are supported:
   (Required)
   The name of the user, e.g. `[email protected]`.
 
+<a name="nested_binary_authorization"></a>The `binary_authorization` block supports:
+
+* `evaluation_mode` -
+  (Optional)
+  Mode of operation for binauthz policy evaluation. If unspecified,
+  defaults to DISABLED.
+  Possible values are: `DISABLED`, `PROJECT_SINGLETON_POLICY_ENFORCE`.
+
+<a name="nested_upgrade_policy"></a>The `upgrade_policy` block supports:
+
+* `policy` -
+  (Optional)
+  Specifies which upgrade policy to use.
+  Possible values are: `SERIAL`, `CONCURRENT`.
+
 ## Attributes Reference
 
 In addition to the arguments listed above, the following computed attributes are exported:

website/docs/r/gkeonprem_vmware_cluster.html.markdown

@@ -213,6 +213,9 @@ resource "google_gkeonprem_vmware_cluster" "cluster-manuallb" {
   }
   vm_tracking_enabled = true
   enable_control_plane_v2 = true
+  upgrade_policy {
+    control_plane_only = true
+  }
   authorization {
     admin_users {
       username = "[email protected]"
@@ -363,6 +366,11 @@ The following arguments are supported:
   (Optional)
   Enable control plane V2. Default to false.
 
+* `upgrade_policy` -
+  (Optional)
+  Specifies upgrade policy for the cluster.
+  Structure is [documented below](#nested_upgrade_policy).
+
 * `project` - (Optional) The ID of the project in which the resource belongs.
     If it is not provided, the provider project is used.
 
@@ -647,6 +655,12 @@ The following arguments are supported:
   (Required)
   The name of the user, e.g. `[email protected]`.
 
+<a name="nested_upgrade_policy"></a>The `upgrade_policy` block supports:
+
+* `control_plane_only` -
+  (Optional)
+  Controls whether the upgrade applies to the control plane only.
+
 ## Attributes Reference
 
 In addition to the arguments listed above, the following computed attributes are exported: