Well, ok, the thing I had hoped would work here isn't working. As you guys predicted, the auth stuff is a tad wonky. Unlike EKS and AKS, which can auth against master using ordinary client certs/keys, it appears GKE-provisioned clusters require something else (

gcloud config config-helper

). Alex and I will pow wow tomorrow to figure this out, and we'll send out a link to the PR for a working example as soon as we figure it out.