resource "google_container_cluster" "rarelens" {
  count               = var.deploy_kubernetes ? 1 : 0
  name                = "rarelens"
  location            = var.region
  enable_autopilot    = true
  deletion_protection = var.deletion_protection
  # Same VPC as Cloud SQL's private IP; without this the cluster lands on the "default" network.
  network    = google_compute_network.vpc.id
  subnetwork = google_compute_subnetwork.gke.id
  ip_allocation_policy {}

  workload_identity_config { workload_pool = "${var.project}.svc.id.goog" }
  release_channel { channel = "REGULAR" }
}