google cloud sdk no longer providing basic auth
As of yesterday, the google cloud sdk no longer provisions basic auth for the admin user for kubernetes clusters on 1.9.7, which we rely on to create the rbac settings in our gke_bootstrap_script
The client certs that remain also do not have permission to make rbac changes (see https://github.com/kubernetes/kubernetes/issues/65400)
As far as I can tell, this change was not supposed to apply until 1.12 clusters, and there is nothing about this in the release notes https://cloud.google.com/sdk/docs/release-notes so this may be a temporary bug
For now the workaround is to explicitly enable basic auth when creating the cluster
@marin the intended future path from gke, is the team needs to have the Kubernetes Engine Admin role added in the gcp project's IAM - https://cloud.google.com/kubernetes-engine/docs/how-to/iam