catalog/gke-autopilot/cluster/cluster.yaml [43:70]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  ipAllocationPolicy:
    clusterSecondaryRangeName: pods # kpt-set: ${pods-range-name}
    servicesSecondaryRangeName: services # kpt-set: ${services-range-name}
  location: us-east4 # kpt-set: ${location}
  # Allow internet access to the GKE control plane by default.
  # This default is a deliberate compromise for ease of use over security.
  # For increased security, reduce the CIDR blocks to cover only known clients.
  masterAuthorizedNetworksConfig:
    cidrBlocks:
      - cidrBlock: 0.0.0.0/0
        displayName: Whole Internet
  networkRef:
    external: projects/network-project-id/global/networks/default # kpt-set: ${network-ref}
  privateClusterConfig:
    # Allow public access to the GKE control plane by default.
    # This default is a deliberate compromise for ease of use over security.
    # For increased security, set to true to disable public IP access.
    enablePrivateEndpoint: false
    # Default to private nodes (no public IP).
    enablePrivateNodes: true
    # Enable global access to the GKE control plane's internal loab balancer.
    # https://cloud.google.com/load-balancing/docs/internal/setting-up-internal#ilb-global-access
    masterGlobalAccessConfig:
      enabled: true
    masterIpv4CidrBlock: 10.254.0.0/28 # kpt-set: ${master-ip-range}
  # Enable dataplane V2
  # https://cloud.google.com/kubernetes-engine/docs/concepts/dataplane-v2
  datapathProvider: ADVANCED_DATAPATH
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



catalog/gke/cluster/cluster.yaml [50:77]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  ipAllocationPolicy:
    clusterSecondaryRangeName: pods # kpt-set: ${pods-range-name}
    servicesSecondaryRangeName: services # kpt-set: ${services-range-name}
  location: us-east4 # kpt-set: ${location}
  # Allow internet access to the GKE control plane by default.
  # This default is a deliberate compromise for ease of use over security.
  # For increased security, reduce the CIDR blocks to cover only known clients.
  masterAuthorizedNetworksConfig:
    cidrBlocks:
      - cidrBlock: 0.0.0.0/0
        displayName: Whole Internet
  networkRef:
    external: projects/network-project-id/global/networks/default # kpt-set: ${network-ref}
  privateClusterConfig:
    # Allow public access to the GKE control plane by default.
    # This default is a deliberate compromise for ease of use over security.
    # For increased security, set to true to disable public IP access.
    enablePrivateEndpoint: false
    # Default to private nodes (no public IP).
    enablePrivateNodes: true
    # Enable global access to the GKE control plane's internal loab balancer.
    # https://cloud.google.com/load-balancing/docs/internal/setting-up-internal#ilb-global-access
    masterGlobalAccessConfig:
      enabled: true
    masterIpv4CidrBlock: 10.254.0.0/28 # kpt-set: ${master-ip-range}
  # Enable dataplane V2
  # https://cloud.google.com/kubernetes-engine/docs/concepts/dataplane-v2
  datapathProvider: ADVANCED_DATAPATH
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



