add support for upgrade notification filters to gke cluster modules (#3316)

tests/modules/gke_cluster_standard/examples/notifications.yaml

@@ -0,0 +1,181 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.cluster-1.google_container_cluster.cluster:
+    addons_config:
+    - cloudrun_config:
+      - disabled: true
+        load_balancer_type: null
+      config_connector_config:
+      - enabled: false
+      dns_cache_config:
+      - enabled: true
+      gce_persistent_disk_csi_driver_config:
+      - enabled: true
+      gcp_filestore_csi_driver_config:
+      - enabled: true
+      gcs_fuse_csi_driver_config:
+      - enabled: true
+      gke_backup_agent_config:
+      - enabled: false
+      horizontal_pod_autoscaling:
+      - disabled: false
+      http_load_balancing:
+      - disabled: false
+      istio_config:
+      - auth: null
+        disabled: true
+      kalm_config:
+      - enabled: false
+      network_policy_config:
+      - disabled: true
+      stateful_ha_config:
+      - enabled: false
+    allow_net_admin: null
+    binary_authorization: []
+    control_plane_endpoints_config:
+    - dns_endpoint_config:
+      - allow_external_traffic: true
+      ip_endpoints_config:
+      - enabled: false
+    cost_management_config:
+    - enabled: true
+    datapath_provider: ADVANCED_DATAPATH
+    default_max_pods_per_node: 110
+    deletion_protection: true
+    description: null
+    disable_l4_lb_firewall_reconciliation: false
+    dns_config: []
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    enable_autopilot: null
+    enable_cilium_clusterwide_network_policy: false
+    enable_fqdn_network_policy: true
+    enable_intranode_visibility: false
+    enable_k8s_beta_apis: []
+    enable_kubernetes_alpha: false
+    enable_l4_ilb_subsetting: false
+    enable_legacy_abac: false
+    enable_multi_networking: false
+    enable_shielded_nodes: false
+    enable_tpu: false
+    fleet: []
+    in_transit_encryption_config: null
+    initial_node_count: 1
+    ip_allocation_policy:
+    - additional_ip_ranges_config: []
+      additional_pod_ranges_config: []
+      stack_type: IPV4
+    location: europe-west1-b
+    logging_config:
+    - enable_components:
+      - SYSTEM_COMPONENTS
+    maintenance_policy:
+    - daily_maintenance_window:
+      - start_time: 03:00
+      maintenance_exclusion: []
+      recurring_window: []
+    master_auth:
+    - client_certificate_config:
+      - issue_client_certificate: false
+    min_master_version: null
+    monitoring_config:
+    - enable_components:
+      - SYSTEM_COMPONENTS
+      managed_prometheus:
+      - enabled: true
+    name: cluster-1
+    network: projects/xxx/global/networks/aaa
+    network_performance_config: []
+    network_policy: []
+    node_config:
+    - advanced_machine_features: []
+      boot_disk_kms_key: null
+      containerd_config: []
+      enable_confidential_storage: null
+      ephemeral_storage_config: []
+      ephemeral_storage_local_ssd_config: []
+      fast_socket: []
+      flex_start: null
+      gvnic: []
+      host_maintenance_policy: []
+      local_nvme_ssd_block_config: []
+      local_ssd_encryption_mode: null
+      max_run_duration: null
+      node_group: null
+      preemptible: false
+      reservation_affinity: []
+      resource_labels: null
+      resource_manager_tags: null
+      sandbox_config: []
+      secondary_boot_disks: []
+      sole_tenant_config: []
+      spot: false
+      storage_pools: null
+      tags: null
+      taint: []
+    node_pool_defaults:
+    - node_config_defaults:
+      - containerd_config: []
+        gcfs_config:
+        - enabled: false
+        insecure_kubelet_readonly_port_enabled: 'TRUE'
+    notification_config:
+    - pubsub:
+      - enabled: true
+        filter:
+        - event_type:
+          - SECURITY_BULLETIN_EVENT
+          - UPGRADE_EVENT
+    pod_security_policy_config: []
+    private_cluster_config:
+    - enable_private_endpoint: true
+      enable_private_nodes: true
+      private_endpoint_subnetwork: null
+    project: myproject
+    remove_default_node_pool: true
+    resource_labels: null
+    resource_usage_export_config: []
+    secret_manager_config: []
+    subnetwork: subnet_self_link
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+    user_managed_keys_config: []
+    workload_identity_config:
+    - workload_pool: myproject.svc.id.goog
+  module.cluster-1.google_pubsub_topic.notifications[0]:
+    effective_labels:
+      content: gke-notifications
+      goog-terraform-provisioned: 'true'
+    ingestion_data_source_settings: []
+    kms_key_name: null
+    labels:
+      content: gke-notifications
+    message_retention_duration: null
+    message_transforms: []
+    name: gke-pubsub-notifications
+    project: myproject
+    schema_settings: []
+    terraform_labels:
+      content: gke-notifications
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+
+counts:
+  google_container_cluster: 1
+  google_pubsub_topic: 1
+  modules: 1
+  resources: 2