DeployStack test fails due to unused `gke-gcloud-auth-plugin`

[NimJay]

Describe the bug

• This is regarding /.deploystack/test, which we run in Google Cloud Build via /.deploystack/test.yaml.
• ./deploystack/test was failing to run Online Boutique's Terraform via terraform apply.
• We were seeing the following error:

  null_resource.apply_deployment (local-exec): Executing: ["bash" "-exc" "kubectl apply -k ../kustomize/"]
  null_resource.apply_deployment (local-exec): + kubectl apply -k ../kustomize/
  null_resource.apply_deployment (local-exec): error: The gcp auth plugin has been removed.
  null_resource.apply_deployment (local-exec): Please use the "gke-gcloud-auth-plugin" kubectl/client-go credential plugin instead.
  null_resource.apply_deployment (local-exec): See https://cloud.google.com/blog/products/containers-kubernetes/kubectl-auth-changes-in-gke for further details

• The error occurs because kubectl is not using the gke-gcloud-auth-plugin binary (or the binary doesn't exist).
• The gke-gcloud-auth-plugin binary is explained in this GCP blog post.
  • Summary: gcloud and kubectl now need an additional binary (gke-gcloud-auth-plugin) to authenticate to GKE clusters.

To Reproduce

• Manually trigger the Google Cloud Build Trigger that uses /.deploystack/test.yaml.

Environment

• Google Cloud Build
• Base image: gcr.io/cloudshell-images/cloudshell:latest

[NimJay]

We have gke-cloud-auth-plugin

I ran gcloud version inside the gcr.io/cloudshell-images/cloudshell:latest image. Snippet of the output:

Google Cloud SDK 412.0.0
alpha 2022.12.09
...
gke-gcloud-auth-plugin 0.4.0
...

So it looks like the gke-gcloud-auth-plugin binary exists inside the image! 😌

I even ran gke-gcloud-auth-plugin --version (as suggested by this GCP blog post). The output:

Kubernetes v1.25.2-alpha+ae91c1fc0c443c464a4c878ffa2a4544483c6d1f

The gke-gcloud-auth-plugin binary definitely exists!

We need USE_GKE_GCLOUD_AUTH_PLUGIN

According to the GCP blog post, in addition to installing gke-gcloud-auth-plugin, we need to also run:

export USE_GKE_GCLOUD_AUTH_PLUGIN=True

if the gke-gcloud-auth-plugin plugin was installed prior to the release of Kubernetes 1.26. Adding export USE_GKE_GCLOUD_AUTH_PLUGIN=True to /.deploystack/test fixes our problem!

[NimJay]

This was fixed in https://github.com/GoogleCloudPlatform/microservices-demo/pull/1512.