anchor.diff:      services_secondary_range_name = google_compute_subnetwork.container_subnetwork.secondary_ip_range[1].range_name
     }
   }
  -`, containerNetName, clusterName)
  +`, containerNetName, clusterName, orgDomain)
   }
   
   func testAccContainerCluster_withMasterAuthorizedNetworksConfig(clusterName string, cidrs []string, emptyValue string) string {
  
positive.code: `, clusterName)
  }
  
  func testAccContainerCluster_withAuthenticatorGroupsConfig(containerNetName string, clusterName string) string {
  	return fmt.Sprintf(`
  resource "google_compute_network" "container_network" {
    name                    = "%s"
  
negative.code:   subnetwork         = google_compute_subnetwork.container_subnetwork.name
  
    authenticator_groups_config {
      security_group = "gke-security-groups-test@%s"
    }
  
  <% unless version == 'ga' -%>
  