Commits on Oct 14, 2021

1. bash/main: add tf bucket for org-level resources

   

   spiffxp committed Oct 14, 2021
   Copy the full SHA

   9b166d3 View commit details

   Browse the repository at this point in the history

2. terraform/k8s-infra-kubernetes-io: initial commit …

   A module to manage organization-level resources, including:
   
   - a project to use for APIs that only make sense to be enabled in the
     context of org management, like billing or orgpolicy
   - a lien on kubernetes-public to make sure it's not accidentally
     deleted, as a demonstration of how we could use liens
   - a budget for k8s-infra-sandbox-capg
   
   Setting up the project required a little bit of a manual work, because
   in order for terraform to use a project for billing purposes, the
   project needs to already exist and have certain services enabled. This
   involved:
   
   - commenting out "user_project_override" to use a gcloud project with
     cloudresourcemanager and serviceusage APIs enabled
   - commenting out terraform resources that weren't directly related to
     the creation/services of the k8s-infra-kubernetes-io project
   - running terraform apply
   - uncommenting everything
   - running terraform apply again
   
   This was necessary because the Google Cloud billing budgets API does not
   work with user credentials (which is how we've been authenticating and
   using terraform thus far)

   

   spiffxp committed Oct 14, 2021
   Copy the full SHA

   0beacba View commit details

   Browse the repository at this point in the history

3. tf/k8s-infra-kubernetes-io: add k8s-infra-monthly budget …

   $3M/y / 12 mo/y = $250K/mo, alert at 90% (225K) and 100%

   

   spiffxp committed Oct 14, 2021
   Copy the full SHA

   3d4fe9a View commit details

   Browse the repository at this point in the history