Fixes GoogleCloudPlatform#180: Add tests for beta submodules/examples

terraform-google-modules/terraform-google-kubernetes-engine#180

Updated GKE CI pipeline for beta module

infra/concourse/pipelines/terraform-google-kubernetes-engine.yml

@@ -161,6 +161,12 @@ jobs:
       params:
         <<: *run-tests-params
 
+    - task: run-tests-beta-cluster
+      image: integration-test-image
+      file: pull-request/test/ci/beta-cluster.yml
+      params:
+        <<: *run-tests-params
+
   on_success:
     put: notify-integration-test-success
     resource: pull-request

infra/terraform/test_fixtures/terraform-google-kubernetes-engine.tf

@@ -25,16 +25,17 @@ resource "google_project_services" "ci_kubernetes_engine" {
 
   services = [
     "bigquery-json.googleapis.com",
+    "cloudkms.googleapis.com",
+    "cloudresourcemanager.googleapis.com",
     "compute.googleapis.com",
     "container.googleapis.com",
     "containerregistry.googleapis.com",
+    "iam.googleapis.com",
+    "iamcredentials.googleapis.com",
     "oslogin.googleapis.com",
     "pubsub.googleapis.com",
-    "storage-api.googleapis.com",
-    "iam.googleapis.com",
     "serviceusage.googleapis.com",
-    "iamcredentials.googleapis.com",
-    "cloudresourcemanager.googleapis.com",
+    "storage-api.googleapis.com",
   ]
 }
 
@@ -59,6 +60,17 @@ resource "google_project_iam_binding" "ci_kubernetes_engine" {
   ]
 }
 
+resource "google_project_iam_binding" "ci_kubernetes_engine_kms_access" {
+  provider = "google.phoogle"
+
+  project = "${google_project_services.ci_kubernetes_engine.project}"
+  role    = "roles/cloudkms.cryptoKeyEncrypterDecrypter"
+
+  members = [
+    "serviceAccount:service-${google_project.ci_kubernetes_engine.id}@container-engine-robot.iam.gserviceaccount.com",
+  ]
+}
+
 resource "google_service_account_key" "ci_kubernetes_engine" {
   provider = "google.phoogle"