I've got an existing GKE cluster and I'd like to configure it with private nodes as per the GKE hardening guide.

It seems like the possibility for selecting a private cluster is disabled in the cluster configuration UI, and setting it in Terraform with a private_cluster_config block forces destruction of the cluster.

Is there no way to configure private nodes for an existing cluster?