oauth scopes

oauth_scopes
   # Google recommends custom service accounts that have cloud-platform scope and 

permissions granted via IAM Roles.

   service_account = google_service_account.default.email
   oauth_scopes = [
     "https://www.googleapis.com/auth/cloud-platform"
   ]

# seems like can be tightening accoring to Claude
node_config {
  oauth_scopes = [
    "https://www.googleapis.com/auth/logging.write",
    "https://www.googleapis.com/auth/monitoring",
  ]

See also

• google_container_node_pool, node_config
• gke.tf, google_container_cluster, google_container_engine_versions
• Terraform GKE, module, Deploy GKE cluster using Terraform, addons_config, gke.tf, google_container_cluster, google_container_node_pool