anchor.diff:  `, clusterName)
   }
   
  -func testAccContainerCluster_withAuthenticatorGroupsConfig(containerNetName string, clusterName string) string {
  +func testAccContainerCluster_withAuthenticatorGroupsConfig(containerNetName string, clusterName string, orgDomain string) string {
   	return fmt.Sprintf(`
   resource "google_compute_network" "container_network" {
     name                    = "%s"
  
positive.code:     services_secondary_range_name = google_compute_subnetwork.container_subnetwork.secondary_ip_range[1].range_name
    }
  }
  `, containerNetName, clusterName)
  }
  
  func testAccContainerCluster_withMasterAuthorizedNetworksConfig(clusterName string, cidrs []string, emptyValue string) string {
  
negative.code: 	t.Parallel()
  	clusterName := fmt.Sprintf("tf-test-cluster-%s", randString(t, 10))
  	containerNetName := fmt.Sprintf("tf-test-container-net-%s", randString(t, 10))
  	orgDomain := getTestOrgDomainFromEnv(t)
  	vcrTest(t, resource.TestCase{
  		PreCheck:     func() { testAccPreCheck(t) },
  		Providers:    testAccProviders,
  		CheckDestroy: testAccCheckContainerClusterDestroyProducer(t),
  		Steps: []resource.TestStep{
  			{
  				Config: testAccContainerCluster_withAuthenticatorGroupsConfig(containerNetName, clusterName, orgDomain),
  			},
  			{
  				ResourceName:        "google_container_cluster.with_authenticator_groups",
  