GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit
Add KCC yakima service account as Billing Account User for shared billing account in deployment.sh with 60 sec sleep - to avoid project/billing association error on 5 projects
- Dominant language
- Shell
- Stars
- 36
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Description
The following occurs for shared billing accounts after a kpt live render
```
michael@cloudshell:~/dev/pdt-oldev/obriensystems (kcc-lz-8597)$ kubectl get gcp | grep UpdateFailed
computeprojectmetadata.compute.cnrm.cloud.google.com/nonprod-oslogin-meta 9m49s False UpdateFailed 9m49s
computesharedvpchostproject.compute.cnrm.cloud.google.com/computesharedvpchostproject-sample 9m48s False UpdateFailed 9m48s
computesharedvpchostproject.compute.cnrm.cloud.google.com/nonprod-shared-vpc-host 9m48s False UpdateFailed 9m48s
computenetwork.compute.cnrm.cloud.google.com/common-ha-perimeter 9m52s False UpdateFailed 9m52s
computenetwork.compute.cnrm.cloud.google.com/common-mgmt-perimeter 9m52s False UpdateFailed 9m51s
computenetwork.compute.cnrm.cloud.google.com/nonprod-sharedvpc 9m52s False UpdateFailed 9m51s
computenetwork.compute.cnrm.cloud.google.com/priv-perimeter 9m51s False UpdateFailed 9m51s
computenetwork.compute.cnrm.cloud.google.com/prod-sharedvpc 9m51s False UpdateFailed 9m51s
computenetwork.compute.cnrm.cloud.google.com/public-perimeter 9m50s False UpdateFailed 9m50s
iamserviceaccount.iam.cnrm.cloud.google.com/billing-service-account 9m46s False UpdateFailed 9m46s
project.resourcemanager.cnrm.cloud.google.com/audit-prj-id-oldv1 9m43s False UpdateFailed 9m43s
project.resourcemanager.cnrm.cloud.google.com/guardrails-project-oldv1 9m43s False UpdateFailed 9m43s
project.resourcemanager.cnrm.cloud.google.com/net-host-prj-nonprod-oldv1 9m42s False UpdateFailed 9m42s
project.resourcemanager.cnrm.cloud.google.com/net-host-prj-prod-oldv1 9m42s False UpdateFailed 9m42s
project.resourcemanager.cnrm.cloud.google.com/net-per-prj-common-oldv1 9m42s False UpdateFailed 9m42s
resourcemanagerpolicy.resourcemanager.cnrm.cloud.google.com/restrict-resource-locations 9m38s False UpdateFailed 9m38s
resourcemanagerpolicy.resourcemanager.cnrm.cloud.google.com/storage-public-access-prevention 9m36s False UpdateFailed 9m36s
service.serviceusage.cnrm.cloud.google.com/common-nethost-service-compute 9m34s False UpdateFailed 9m31s
service.serviceusage.cnrm.cloud.google.com/common-nethost-service-logging 9m34s False UpdateFailed 9m30s
service.serviceusage.cnrm.cloud.google.com/nonprod-nethost-service-compute 9m34s False UpdateFailed 9m30s
service.serviceusage.cnrm.cloud.google.com/nonprod-nethost-service-dns 9m34s False UpdateFailed 9m30s
service.serviceusage.cnrm.cloud.google.com/nonprod-nethost-service-logging 9m33s False UpdateFailed 9m30s
service.serviceusage.cnrm.cloud.google.com/prod-nethost-service-compute 9m33s False UpdateFailed 9m29s
service.serviceusage.cnrm.cloud.google.com/prod-nethost-service-logging 9m33s False UpdateFailed 9m29s
storagebucket.storage.cnrm.cloud.google.com/audit-audit-prj-id-oldv1 9m33s False UpdateFailed 9m33s
storagebucket.storage.cnrm.cloud.google.com/log-bucket-audit-prj-id-oldv1 9m33s False UpdateFailed 9m33s
michael@cloudshell:~/dev/pdt-oldev/obriensystems (kcc-lz-8597)$ kubectl get gcp | grep UpdateFailed | wc -l
26
michael@cloudshell:~/dev/pdt-oldev/obriensystems (kcc-lz-8597)$ kubectl get gcp | grep UpToDate | wc -l
41
michael@cloudshell:~/dev/pdt-oldev/obriensystems (kcc-lz-8597)$ kubectl describe project.resourcemanager.cnrm.cloud.google.com/audit-prj-id-oldv1
Warning UpdateFailed 82s (x13 over 15m) project-controller Update call failed: error applying desired state: summary: failed pre-requisites: missing permission on "billingAccounts/011D7E-BD499C-CF71C5": billing.resourceAssociations.creat
kubectl get ConfigConnectorContext -n config-control -o jsonpath='{.items[0].spec.googleServiceAccount}'
service-946263025335@gcp-sa-yakima.iam.gserviceaccount.com
```
Contributor guide
Assessment
This issue has not been assessed yet.