From 9b40c7880a0e9f6453b469acb5f07d2c4bc511ae Mon Sep 17 00:00:00 2001
From: Max Brydak <57046745+maxxieb@users.noreply.github.com>
Date: Thu, 15 Jan 2026 04:20:45 +0100
Subject: [PATCH 1/3] fix: Change resource type to kubernetes_config_map_v1

Fix deprecation warning when planning against provider v7.15.0
---
 modules/private-cluster/masq.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/private-cluster/masq.tf b/modules/private-cluster/masq.tf
index cbb862d720..11f1e8f898 100644
--- a/modules/private-cluster/masq.tf
+++ b/modules/private-cluster/masq.tf
@@ -19,7 +19,7 @@
 /******************************************
   Create ip-masq-agent confimap
  *****************************************/
-resource "kubernetes_config_map" "ip_masq_agent" {
+resource "kubernetes_config_map_v1" "ip_masq_agent" {
   count = var.configure_ip_masq ? 1 : 0
 
   metadata {

From 1d0d01dabdc144160f148388f216a5fd997e355b Mon Sep 17 00:00:00 2001
From: Max Brydak <57046745+maxxieb@users.noreply.github.com>
Date: Thu, 15 Jan 2026 04:24:51 +0100
Subject: [PATCH 2/3] Change resource type to kubernetes_config_map_v1

---
 autogen/main/masq.tf.tmpl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/autogen/main/masq.tf.tmpl b/autogen/main/masq.tf.tmpl
index 33d9dee31b..59551d7fdb 100644
--- a/autogen/main/masq.tf.tmpl
+++ b/autogen/main/masq.tf.tmpl
@@ -20,7 +20,7 @@
 /******************************************
   Create ip-masq-agent confimap
  *****************************************/
-resource "kubernetes_config_map" "ip_masq_agent" {
+resource "kubernetes_config_map_v1" "ip_masq_agent" {
   count = var.configure_ip_masq ? 1 : 0
 
   metadata {
@@ -48,4 +48,4 @@ EOF
     {% endif %}
   ]
 }
-{% endif %}
\ No newline at end of file
+{% endif %}

From e2bb465c7f32c7e30932f2cf6201f58f2b2ab240 Mon Sep 17 00:00:00 2001
From: Max Brydak <57046745+maxxieb@users.noreply.github.com>
Date: Fri, 16 Jan 2026 19:21:12 +0100
Subject: [PATCH 3/3] make build ran

---
 masq.tf                                             | 2 +-
 modules/beta-private-cluster-update-variant/masq.tf | 2 +-
 modules/beta-private-cluster/masq.tf                | 2 +-
 modules/beta-public-cluster-update-variant/masq.tf  | 2 +-
 modules/beta-public-cluster/masq.tf                 | 2 +-
 modules/gke-standard-cluster/metadata.yaml          | 2 +-
 modules/private-cluster-update-variant/masq.tf      | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/masq.tf b/masq.tf
index cbb862d720..11f1e8f898 100644
--- a/masq.tf
+++ b/masq.tf
@@ -19,7 +19,7 @@
 /******************************************
   Create ip-masq-agent confimap
  *****************************************/
-resource "kubernetes_config_map" "ip_masq_agent" {
+resource "kubernetes_config_map_v1" "ip_masq_agent" {
   count = var.configure_ip_masq ? 1 : 0
 
   metadata {
diff --git a/modules/beta-private-cluster-update-variant/masq.tf b/modules/beta-private-cluster-update-variant/masq.tf
index cbb862d720..11f1e8f898 100644
--- a/modules/beta-private-cluster-update-variant/masq.tf
+++ b/modules/beta-private-cluster-update-variant/masq.tf
@@ -19,7 +19,7 @@
 /******************************************
   Create ip-masq-agent confimap
  *****************************************/
-resource "kubernetes_config_map" "ip_masq_agent" {
+resource "kubernetes_config_map_v1" "ip_masq_agent" {
   count = var.configure_ip_masq ? 1 : 0
 
   metadata {
diff --git a/modules/beta-private-cluster/masq.tf b/modules/beta-private-cluster/masq.tf
index cbb862d720..11f1e8f898 100644
--- a/modules/beta-private-cluster/masq.tf
+++ b/modules/beta-private-cluster/masq.tf
@@ -19,7 +19,7 @@
 /******************************************
   Create ip-masq-agent confimap
  *****************************************/
-resource "kubernetes_config_map" "ip_masq_agent" {
+resource "kubernetes_config_map_v1" "ip_masq_agent" {
   count = var.configure_ip_masq ? 1 : 0
 
   metadata {
diff --git a/modules/beta-public-cluster-update-variant/masq.tf b/modules/beta-public-cluster-update-variant/masq.tf
index cbb862d720..11f1e8f898 100644
--- a/modules/beta-public-cluster-update-variant/masq.tf
+++ b/modules/beta-public-cluster-update-variant/masq.tf
@@ -19,7 +19,7 @@
 /******************************************
   Create ip-masq-agent confimap
  *****************************************/
-resource "kubernetes_config_map" "ip_masq_agent" {
+resource "kubernetes_config_map_v1" "ip_masq_agent" {
   count = var.configure_ip_masq ? 1 : 0
 
   metadata {
diff --git a/modules/beta-public-cluster/masq.tf b/modules/beta-public-cluster/masq.tf
index cbb862d720..11f1e8f898 100644
--- a/modules/beta-public-cluster/masq.tf
+++ b/modules/beta-public-cluster/masq.tf
@@ -19,7 +19,7 @@
 /******************************************
   Create ip-masq-agent confimap
  *****************************************/
-resource "kubernetes_config_map" "ip_masq_agent" {
+resource "kubernetes_config_map_v1" "ip_masq_agent" {
   count = var.configure_ip_masq ? 1 : 0
 
   metadata {
diff --git a/modules/gke-standard-cluster/metadata.yaml b/modules/gke-standard-cluster/metadata.yaml
index a9ebc3d30d..9ef9812c12 100644
--- a/modules/gke-standard-cluster/metadata.yaml
+++ b/modules/gke-standard-cluster/metadata.yaml
@@ -1123,9 +1123,9 @@ spec:
     roles:
       - level: Project
         roles:
+          - roles/container.admin
           - roles/iam.serviceAccountUser
           - roles/compute.admin
-          - roles/container.admin
     services:
       - compute.googleapis.com
       - container.googleapis.com
diff --git a/modules/private-cluster-update-variant/masq.tf b/modules/private-cluster-update-variant/masq.tf
index cbb862d720..11f1e8f898 100644
--- a/modules/private-cluster-update-variant/masq.tf
+++ b/modules/private-cluster-update-variant/masq.tf
@@ -19,7 +19,7 @@
 /******************************************
   Create ip-masq-agent confimap
  *****************************************/
-resource "kubernetes_config_map" "ip_masq_agent" {
+resource "kubernetes_config_map_v1" "ip_masq_agent" {
   count = var.configure_ip_masq ? 1 : 0
 
   metadata {