diff --git a/fast/stages/3-gke-dev/README.md b/fast/stages/3-gke-dev/README.md
index 820e80649..bf95e9bcf 100644
--- a/fast/stages/3-gke-dev/README.md
+++ b/fast/stages/3-gke-dev/README.md
@@ -239,7 +239,7 @@ Clusters can then be configured for fleet registration and one of the config man
 | [host_project_ids](variables-fast.tf#L52) | Shared VPC host project name => id mappings. | <code>map&#40;string&#41;</code> |  | <code>&#123;&#125;</code> | <code>2-networking</code> |
 | [iam](variables.tf#L105) | Project-level authoritative IAM bindings for users and service accounts in  {ROLE => [MEMBERS]} format. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> |  |
 | [iam_by_principals](variables.tf#L112) | Authoritative IAM binding in {PRINCIPAL => [ROLES]} format. Principals need to be statically defined to avoid cycle errors. Merged internally with the `iam` variable. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> |  |
-| [nodepools](variables.tf#L119) | Nodepools configuration. Refer to the gke-nodepool module for type details. | <code title="map&#40;map&#40;object&#40;&#123;&#10;  gke_version       &#61; optional&#40;string&#41;&#10;  k8s_labels        &#61; optional&#40;map&#40;string&#41;, &#123;&#125;&#41;&#10;  max_pods_per_node &#61; optional&#40;number&#41;&#10;  name              &#61; optional&#40;string&#41;&#10;  node_config &#61; optional&#40;any, &#123;&#10;    disk_type &#61; &#34;pd-balanced&#34;&#10;    shielded_instance_config &#61; &#123;&#10;      enable_integrity_monitoring &#61; true&#10;      enable_secure_boot          &#61; true&#10;    &#125;&#10;  &#125;&#41;&#10;  node_count &#61; optional&#40;map&#40;number&#41;, &#123;&#10;    initial &#61; 1&#10;  &#125;&#41;&#10;  node_locations  &#61; optional&#40;list&#40;string&#41;&#41;&#10;  nodepool_config &#61; optional&#40;any&#41;&#10;  network_config &#61; optional&#40;object&#40;&#123;&#10;    enable_private_nodes &#61; optional&#40;bool, true&#41;&#10;    pod_range &#61; optional&#40;object&#40;&#123;&#10;      cidr   &#61; optional&#40;string&#41;&#10;      create &#61; optional&#40;bool, false&#41;&#10;      name   &#61; optional&#40;string&#41;&#10;    &#125;&#41;, &#123;&#125;&#41;&#10;    additional_node_network_configs &#61; optional&#40;list&#40;object&#40;&#123;&#10;      network    &#61; string&#10;      subnetwork &#61; string&#10;    &#125;&#41;&#41;, &#91;&#93;&#41;&#10;    additional_pod_network_config &#61; optional&#40;list&#40;object&#40;&#123;&#10;      subnetwork          &#61; string&#10;      secondary_pod_range &#61; string&#10;      max_pods_per_node   &#61; string&#10;    &#125;&#41;&#41;, &#91;&#93;&#41;&#10;  &#125;&#41;&#41;&#10;  reservation_affinity  &#61; optional&#40;any&#41;&#10;  service_account       &#61; optional&#40;any&#41;&#10;  sole_tenant_nodegroup &#61; optional&#40;string&#41;&#10;  tags                  &#61; optional&#40;list&#40;string&#41;&#41;&#10;  taints &#61; optional&#40;map&#40;object&#40;&#123;&#10;    value  &#61; string&#10;    effect &#61; string&#10;  &#125;&#41;&#41;&#41;&#10;&#125;&#41;&#41;&#41;">map&#40;map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;&#41;</code> |  | <code>&#123;&#125;</code> |  |
+| [nodepools](variables.tf#L119) | Nodepools configuration. Refer to the gke-nodepool module for type details. | <code title="map&#40;map&#40;object&#40;&#123;&#10;  gke_version       &#61; optional&#40;string&#41;&#10;  k8s_labels        &#61; optional&#40;map&#40;string&#41;, &#123;&#125;&#41;&#10;  max_pods_per_node &#61; optional&#40;number&#41;&#10;  name              &#61; optional&#40;string&#41;&#10;  node_config &#61; optional&#40;any, &#123;&#10;    disk_type &#61; &#34;pd-balanced&#34;&#10;    shielded_instance_config &#61; &#123;&#10;      enable_integrity_monitoring &#61; true&#10;      enable_secure_boot          &#61; true&#10;    &#125;&#10;  &#125;&#41;&#10;  node_count &#61; optional&#40;map&#40;number&#41;, &#123;&#10;    initial &#61; 1&#10;  &#125;&#41;&#10;  node_locations  &#61; optional&#40;list&#40;string&#41;&#41;&#10;  nodepool_config &#61; optional&#40;any&#41;&#10;  network_config &#61; optional&#40;object&#40;&#123;&#10;    enable_private_nodes &#61; optional&#40;bool, true&#41;&#10;    pod_range &#61; optional&#40;object&#40;&#123;&#10;      cidr   &#61; optional&#40;string&#41;&#10;      create &#61; optional&#40;bool, false&#41;&#10;      name   &#61; optional&#40;string&#41;&#10;    &#125;&#41;, &#123;&#125;&#41;&#10;    additional_node_network_configs &#61; optional&#40;list&#40;object&#40;&#123;&#10;      network    &#61; string&#10;      subnetwork &#61; string&#10;    &#125;&#41;&#41;, &#91;&#93;&#41;&#10;    additional_pod_network_configs &#61; optional&#40;list&#40;object&#40;&#123;&#10;      subnetwork          &#61; string&#10;      secondary_pod_range &#61; string&#10;      max_pods_per_node   &#61; string&#10;    &#125;&#41;&#41;, &#91;&#93;&#41;&#10;  &#125;&#41;&#41;&#10;  reservation_affinity  &#61; optional&#40;any&#41;&#10;  service_account       &#61; optional&#40;any&#41;&#10;  sole_tenant_nodegroup &#61; optional&#40;string&#41;&#10;  tags                  &#61; optional&#40;list&#40;string&#41;&#41;&#10;  taints &#61; optional&#40;map&#40;object&#40;&#123;&#10;    value  &#61; string&#10;    effect &#61; string&#10;  &#125;&#41;&#41;&#41;&#10;&#125;&#41;&#41;&#41;">map&#40;map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;&#41;</code> |  | <code>&#123;&#125;</code> |  |
 | [stage_config](variables.tf#L168) | FAST stage configuration used to find resource ids. Must match name defined for the stage in resource management. | <code title="object&#40;&#123;&#10;  environment &#61; string&#10;  name        &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  environment &#61; &#34;dev&#34;&#10;  name        &#61; &#34;gke-dev&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
 | [subnet_self_links](variables-fast.tf#L70) | Subnet VPC name => { name => self link }  mappings. | <code>map&#40;map&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> | <code>2-networking</code> |
 | [vpc_config](variables.tf#L180) | VPC-level configuration for project and clusters. | <code title="object&#40;&#123;&#10;  host_project_id &#61; string&#10;  vpc_self_link   &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  host_project_id &#61; &#34;dev-spoke-0&#34;&#10;  vpc_self_link   &#61; &#34;dev-spoke-0&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
diff --git a/fast/stages/3-gke-dev/variables.tf b/fast/stages/3-gke-dev/variables.tf
index 07a1608ee..e4b841a57 100644
--- a/fast/stages/3-gke-dev/variables.tf
+++ b/fast/stages/3-gke-dev/variables.tf
@@ -146,7 +146,7 @@ variable "nodepools" {
         network    = string
         subnetwork = string
       })), [])
-      additional_pod_network_config = optional(list(object({
+      additional_pod_network_configs = optional(list(object({
         subnetwork          = string
         secondary_pod_range = string
         max_pods_per_node   = string
diff --git a/modules/gke-nodepool/README.md b/modules/gke-nodepool/README.md
index 6a9f6d141..bc526d497 100644
--- a/modules/gke-nodepool/README.md
+++ b/modules/gke-nodepool/README.md
@@ -67,6 +67,7 @@ module "cluster-1-nodepool-1" {
 }
 # tftest modules=1 resources=2 inventory=create-sa.yaml
 ```
+
 ### Node & node pool configuration
 
 ```hcl
@@ -103,6 +104,7 @@ module "cluster-1-nodepool-1" {
 }
 # tftest modules=1 resources=2 inventory=config.yaml
 ```
+
 ### GPU Node & node pool configuration
 
 ```hcl
@@ -137,7 +139,8 @@ module "cluster-1-nodepool-gpu-1" {
 # tftest modules=1 resources=2 inventory=guest-accelerator.yaml
 ```
 
-### Dynamic Workload Scheduler (DWS) & node pool configuration 
+### Dynamic Workload Scheduler (DWS) & node pool configuration
+
 This example uses Dynamic Workload Scheduler (DWS) to configure a GPU nodepool.
 
 ```hcl
@@ -198,7 +201,7 @@ module "cluster-1-nodepool-dws" {
 | [labels](variables.tf#L41) | The resource labels to be applied each node (vm). | <code>map&#40;string&#41;</code> |  | <code>&#123;&#125;</code> |
 | [max_pods_per_node](variables.tf#L53) | Maximum number of pods per node. | <code>number</code> |  | <code>null</code> |
 | [name](variables.tf#L59) | Optional nodepool name. | <code>string</code> |  | <code>null</code> |
-| [network_config](variables.tf#L65) | Network configuration. | <code title="object&#40;&#123;&#10;  enable_private_nodes &#61; optional&#40;bool&#41;&#10;  pod_range &#61; optional&#40;object&#40;&#123;&#10;    cidr   &#61; optional&#40;string&#41;&#10;    create &#61; optional&#40;bool, false&#41;&#10;    name   &#61; optional&#40;string&#41;&#10;  &#125;&#41;, &#123;&#125;&#41;&#10;  additional_node_network_configs &#61; optional&#40;list&#40;object&#40;&#123;&#10;    network    &#61; string&#10;    subnetwork &#61; string&#10;  &#125;&#41;&#41;, &#91;&#93;&#41;&#10;  additional_pod_network_config &#61; optional&#40;list&#40;object&#40;&#123;&#10;    subnetwork          &#61; string&#10;    secondary_pod_range &#61; string&#10;    max_pods_per_node   &#61; string&#10;  &#125;&#41;&#41;, &#91;&#93;&#41;&#10;  total_egress_bandwidth_tier        &#61; optional&#40;string&#41;&#10;  pod_cidr_overprovisioning_disabled &#61; optional&#40;bool, false&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
+| [network_config](variables.tf#L65) | Network configuration. | <code title="object&#40;&#123;&#10;  enable_private_nodes &#61; optional&#40;bool&#41;&#10;  pod_range &#61; optional&#40;object&#40;&#123;&#10;    cidr   &#61; optional&#40;string&#41;&#10;    create &#61; optional&#40;bool, false&#41;&#10;    name   &#61; optional&#40;string&#41;&#10;  &#125;&#41;, &#123;&#125;&#41;&#10;  additional_node_network_configs &#61; optional&#40;list&#40;object&#40;&#123;&#10;    network    &#61; string&#10;    subnetwork &#61; string&#10;  &#125;&#41;&#41;, &#91;&#93;&#41;&#10;  additional_pod_network_configs &#61; optional&#40;list&#40;object&#40;&#123;&#10;    subnetwork          &#61; string&#10;    secondary_pod_range &#61; string&#10;    max_pods_per_node   &#61; string&#10;  &#125;&#41;&#41;, &#91;&#93;&#41;&#10;  total_egress_bandwidth_tier        &#61; optional&#40;string&#41;&#10;  pod_cidr_overprovisioning_disabled &#61; optional&#40;bool, false&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
 | [node_config](variables.tf#L89) | Node-level configuration. | <code title="object&#40;&#123;&#10;  boot_disk_kms_key   &#61; optional&#40;string&#41;&#10;  disk_size_gb        &#61; optional&#40;number&#41;&#10;  disk_type           &#61; optional&#40;string, &#34;pd-balanced&#34;&#41;&#10;  ephemeral_ssd_count &#61; optional&#40;number&#41;&#10;  gcfs                &#61; optional&#40;bool, false&#41;&#10;  guest_accelerator &#61; optional&#40;object&#40;&#123;&#10;    count &#61; number&#10;    type  &#61; string&#10;    gpu_driver &#61; optional&#40;object&#40;&#123;&#10;      version                    &#61; string&#10;      partition_size             &#61; optional&#40;string&#41;&#10;      max_shared_clients_per_gpu &#61; optional&#40;number&#41;&#10;    &#125;&#41;&#41;&#10;  &#125;&#41;&#41;&#10;  local_nvme_ssd_count &#61; optional&#40;number&#41;&#10;  gvnic                &#61; optional&#40;bool, false&#41;&#10;  image_type           &#61; optional&#40;string&#41;&#10;  kubelet_config &#61; optional&#40;object&#40;&#123;&#10;    cpu_manager_policy   &#61; string&#10;    cpu_cfs_quota        &#61; optional&#40;bool&#41;&#10;    cpu_cfs_quota_period &#61; optional&#40;string&#41;&#10;    pod_pids_limit       &#61; optional&#40;number&#41;&#10;  &#125;&#41;&#41;&#10;  linux_node_config &#61; optional&#40;object&#40;&#123;&#10;    sysctls     &#61; optional&#40;map&#40;string&#41;&#41;&#10;    cgroup_mode &#61; optional&#40;string&#41;&#10;  &#125;&#41;&#41;&#10;  local_ssd_count       &#61; optional&#40;number&#41;&#10;  machine_type          &#61; optional&#40;string&#41;&#10;  metadata              &#61; optional&#40;map&#40;string&#41;&#41;&#10;  min_cpu_platform      &#61; optional&#40;string&#41;&#10;  preemptible           &#61; optional&#40;bool&#41;&#10;  sandbox_config_gvisor &#61; optional&#40;bool&#41;&#10;  shielded_instance_config &#61; optional&#40;object&#40;&#123;&#10;    enable_integrity_monitoring &#61; optional&#40;bool&#41;&#10;    enable_secure_boot          &#61; optional&#40;bool&#41;&#10;  &#125;&#41;&#41;&#10;  spot                          &#61; optional&#40;bool&#41;&#10;  workload_metadata_config_mode &#61; optional&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>&#123;&#125;</code> |
 | [node_count](variables.tf#L154) | Number of nodes per instance group. Initial value can only be changed by recreation, current is ignored when autoscaling is used. | <code title="object&#40;&#123;&#10;  current &#61; optional&#40;number&#41;&#10;  initial &#61; number&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  initial &#61; 1&#10;&#125;">&#123;&#8230;&#125;</code> |
 | [node_locations](variables.tf#L166) | Node locations. | <code>list&#40;string&#41;</code> |  | <code>null</code> |
diff --git a/modules/gke-nodepool/main.tf b/modules/gke-nodepool/main.tf
index 6caaeef6b..ddd7489c8 100644
--- a/modules/gke-nodepool/main.tf
+++ b/modules/gke-nodepool/main.tf
@@ -132,7 +132,7 @@ resource "google_container_node_pool" "nodepool" {
       dynamic "additional_pod_network_configs" {
         for_each = try(var.network_config.additional_pod_network_configs, [])
         content {
-          subnetwork          = additional_pod_network_configs.value.network
+          subnetwork          = additional_pod_network_configs.value.subnetwork
           secondary_pod_range = additional_pod_network_configs.value.secondary_pod_range
           max_pods_per_node   = additional_pod_network_configs.value.max_pods_per_node
         }
diff --git a/modules/gke-nodepool/variables.tf b/modules/gke-nodepool/variables.tf
index 951c07cbe..0c1aabbf0 100644
--- a/modules/gke-nodepool/variables.tf
+++ b/modules/gke-nodepool/variables.tf
@@ -75,7 +75,7 @@ variable "network_config" {
       network    = string
       subnetwork = string
     })), [])
-    additional_pod_network_config = optional(list(object({
+    additional_pod_network_configs = optional(list(object({
       subnetwork          = string
       secondary_pod_range = string
       max_pods_per_node   = string