GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit

Add KCC yakima service account as Billing Account User for shared billing account in deployment.sh with 60 sec sleep - to avoid project/billing association error on 5 projects

Open
#207 4 comments 0 reactions 1 assignee Claimed by @fmichaelobrien View on GitHub
arete automation validate_with_v2
Dominant language
Shell
Stars
36
Forks
26
PR merge metrics
No merged PRs in 30d

Description

The following occurs for shared billing accounts after a kpt live render

```
michael@cloudshell:~/dev/pdt-oldev/obriensystems (kcc-lz-8597)$ kubectl get gcp | grep UpdateFailed
computeprojectmetadata.compute.cnrm.cloud.google.com/nonprod-oslogin-meta 9m49s False UpdateFailed 9m49s
computesharedvpchostproject.compute.cnrm.cloud.google.com/computesharedvpchostproject-sample 9m48s False UpdateFailed 9m48s
computesharedvpchostproject.compute.cnrm.cloud.google.com/nonprod-shared-vpc-host 9m48s False UpdateFailed 9m48s
computenetwork.compute.cnrm.cloud.google.com/common-ha-perimeter 9m52s False UpdateFailed 9m52s
computenetwork.compute.cnrm.cloud.google.com/common-mgmt-perimeter 9m52s False UpdateFailed 9m51s
computenetwork.compute.cnrm.cloud.google.com/nonprod-sharedvpc 9m52s False UpdateFailed 9m51s
computenetwork.compute.cnrm.cloud.google.com/priv-perimeter 9m51s False UpdateFailed 9m51s
computenetwork.compute.cnrm.cloud.google.com/prod-sharedvpc 9m51s False UpdateFailed 9m51s
computenetwork.compute.cnrm.cloud.google.com/public-perimeter 9m50s False UpdateFailed 9m50s
iamserviceaccount.iam.cnrm.cloud.google.com/billing-service-account 9m46s False UpdateFailed 9m46s
project.resourcemanager.cnrm.cloud.google.com/audit-prj-id-oldv1 9m43s False UpdateFailed 9m43s
project.resourcemanager.cnrm.cloud.google.com/guardrails-project-oldv1 9m43s False UpdateFailed 9m43s
project.resourcemanager.cnrm.cloud.google.com/net-host-prj-nonprod-oldv1 9m42s False UpdateFailed 9m42s
project.resourcemanager.cnrm.cloud.google.com/net-host-prj-prod-oldv1 9m42s False UpdateFailed 9m42s
project.resourcemanager.cnrm.cloud.google.com/net-per-prj-common-oldv1 9m42s False UpdateFailed 9m42s
resourcemanagerpolicy.resourcemanager.cnrm.cloud.google.com/restrict-resource-locations 9m38s False UpdateFailed 9m38s
resourcemanagerpolicy.resourcemanager.cnrm.cloud.google.com/storage-public-access-prevention 9m36s False UpdateFailed 9m36s
service.serviceusage.cnrm.cloud.google.com/common-nethost-service-compute 9m34s False UpdateFailed 9m31s
service.serviceusage.cnrm.cloud.google.com/common-nethost-service-logging 9m34s False UpdateFailed 9m30s
service.serviceusage.cnrm.cloud.google.com/nonprod-nethost-service-compute 9m34s False UpdateFailed 9m30s
service.serviceusage.cnrm.cloud.google.com/nonprod-nethost-service-dns 9m34s False UpdateFailed 9m30s
service.serviceusage.cnrm.cloud.google.com/nonprod-nethost-service-logging 9m33s False UpdateFailed 9m30s
service.serviceusage.cnrm.cloud.google.com/prod-nethost-service-compute 9m33s False UpdateFailed 9m29s
service.serviceusage.cnrm.cloud.google.com/prod-nethost-service-logging 9m33s False UpdateFailed 9m29s
storagebucket.storage.cnrm.cloud.google.com/audit-audit-prj-id-oldv1 9m33s False UpdateFailed 9m33s
storagebucket.storage.cnrm.cloud.google.com/log-bucket-audit-prj-id-oldv1 9m33s False UpdateFailed 9m33s
michael@cloudshell:~/dev/pdt-oldev/obriensystems (kcc-lz-8597)$ kubectl get gcp | grep UpdateFailed | wc -l
26
michael@cloudshell:~/dev/pdt-oldev/obriensystems (kcc-lz-8597)$ kubectl get gcp | grep UpToDate | wc -l
41

michael@cloudshell:~/dev/pdt-oldev/obriensystems (kcc-lz-8597)$ kubectl describe project.resourcemanager.cnrm.cloud.google.com/audit-prj-id-oldv1

Warning UpdateFailed 82s (x13 over 15m) project-controller Update call failed: error applying desired state: summary: failed pre-requisites: missing permission on "billingAccounts/011D7E-BD499C-CF71C5": billing.resourceAssociations.creat

kubectl get ConfigConnectorContext -n config-control -o jsonpath='{.items[0].spec.googleServiceAccount}'
service-946263025335@gcp-sa-yakima.iam.gserviceaccount.com
```

Screen Shot 2022-12-07 at 20 25 23

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.