Enable basic protection for clusters.

AndreasBergmeier6176 · AndreasBergmeier6176 · commit 6e9ab653b080 · 2024-04-19T11:29:46.000+02:00
diff --git a/tf/service_cluster/container.tf b/tf/service_cluster/container.tf
@@ -44,6 +44,14 @@ resource "google_container_cluster" "main" {
 
   deletion_protection = var.deletion_protection
 
+  protect_config {
+    workload_config {
+      audit_mode = "BASIC"
+    }
+    workload_vulnerability_mode = "BASIC"
+  }
+
+
   lifecycle {
     ignore_changes = [
       dns_config,
