anchor.diff:  	return fmt.Sprintf(`
   resource "google_container_cluster" "primary" {
   	name = "%s"
  -	zone = "us-central1-a"
  -	initial_node_count = 3
  +	location = "us-central1-a"
  +	initial_node_count = 1
   
   	addons_config {
   		http_load_balancing { disabled = false }
  -		kubernetes_dashboard { disabled = true }
  -		horizontal_pod_autoscaling { disabled = true }
  +		kubernetes_dashboard { disabled = false }
  +		horizontal_pod_autoscaling { disabled = false }
  +		network_policy_config { disabled = false }
  +<% unless version == 'ga' -%>
  +		istio_config {
  +			disabled = false
  +			auth = "AUTH_NONE"
  +		}
  +		cloudrun_config {disabled = false }
  +<% end -%>
   	}
   }`, clusterName)
   }
  
positive.code: }
  
  <% unless version == 'ga' -%>
  func testAccContainerCluster_withIstioEnabled(clusterName string) string {
  	return fmt.Sprintf(`
  resource "google_container_cluster" "with_istio_enabled" {
  	name = "%s"
  	zone = "us-central1-a"
  	initial_node_count = 1
  
  	addons_config {
  		istio_config {
  			disabled = false
  			auth     = "AUTH_NONE"
  		}
  	}
  }`, clusterName)
  }
  
  func testAccContainerCluster_withIstioAuthEnabled(clusterName string) string {
  	return fmt.Sprintf(`
  resource "google_container_cluster" "with_istio_enabled" {
  	name = "%s"
  	zone = "us-central1-a"
  	initial_node_count = 1
  
  	addons_config {
  		istio_config {
  			disabled = false
  			auth = "AUTH_MUTUAL_TLS"
  		}
  	}
  }`, clusterName)
  }
  
  func testAccContainerCluster_withCloudRunEnabled(clusterName string) string {
  	return fmt.Sprintf(`
  resource "google_container_cluster" "with_cloudrun_enabled" {
  	name = "%s"
  	zone = "us-central1-a"
  	initial_node_count = 1
  
  	addons_config {
  		http_load_balancing {
  			disabled = false
  		}
  		istio_config {
  			disabled = false
  		}
  		cloudrun_config {
  			disabled = false
  		}
  	}
  }`, clusterName)
  }
  
  func testAccContainerCluster_withAuthenticatorGroupsConfig(clusterName string) string {
  	return fmt.Sprintf(`
  resource "google_compute_network" "container_network" {
  
negative.code: 	})
  }
  
  func TestAccContainerCluster_withAddons(t *testing.T) {
  	t.Parallel()
  
  	clusterName := fmt.Sprintf("cluster-test-%s", acctest.RandString(10))
  
  	resource.Test(t, resource.TestCase{
  		PreCheck:	  func() { testAccPreCheck(t) },
  		Providers:	  testAccProviders,
  		CheckDestroy: testAccCheckContainerClusterDestroy,
  		Steps: []resource.TestStep{
  			{
  				Config: testAccContainerCluster_withAddons(clusterName),
  			},
  			{
  				ResourceName:		 "google_container_cluster.primary",
  