feat: add GKE default service account as output

[Monska85]

PR Type

Enhancement

---

Description

• Exposes the GKE cluster's default service account as a new output variable
• Enables external access to the service account information for further configuration or integration

---

Changes walkthrough 📝

	Relevant files
Enhancement	outputs.tf Add GKE service account output variable                                    outputs.tf Added new output variable gke_service_account to expose the GKE cluster's service account +5/-0

---

💡 PR-Agent usage: Comment /help "your question" on any pull request to receive relevant information

[sparkfabrik-ai-bot]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪

🧪 No relevant tests

🔒 Security concerns Sensitive information exposure: The GKE service account is a sensitive credential that provides access to GCP resources. Exposing it as an output variable could lead to security risks if this information is not properly protected or if it's accidentally exposed in logs or other outputs. Consider whether this exposure is necessary and ensure proper security controls are in place to protect this information.

⚡ Recommended focus areas for review Security Exposure Exposing the GKE service account as an output could potentially allow unintended access to cluster resources if this information is not properly protected

[sparkfabrik-ai-bot]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Score
Security	Mark sensitive outputs as sensitive to prevent accidental exposure of credentials in logs and outputs Add sensitive = true attribute to protect the service account output as it may contain sensitive information. outputs.tf [81-84] output "gke_service_account" { value = module.gke.service_account description = "The service account used by the GKE cluster." + sensitive = true } Suggestion importance[1-10]: 9 Why: This is a critical security enhancement that prevents potential exposure of sensitive service account credentials in logs and Terraform outputs, which could be a significant security risk if left unprotected.	9