feat: set up calendar agent in k8s cluster

[braaar]

TODO

• get google client ID and secret (reuse the one from ayr-apps or make a new google cloud project for this?)
• Set google client ID and secret in config (needed for oauth)
• enable firestore in branches org main or other project
• set up necessary IAM role so that the service can access firestore
• set google project in config, or programatically (needed for firestore)
• Transfer repo to getbranches org

[github-actions]

🍹 preview on branches-main/branches/branches-main/main

Pulumi report

Previewing update (branches/main)

View Live: https://app.pulumi.com/branches/branches-main/main/previews/23e44b5c-5b24-40a3-a62f-61f3eb201a82

@ Previewing update............

@ Previewing update......
pulumi:pulumi:Stack branches-main-main running 
@ Previewing update..............
pulumi:providers:gcp google-null-provider  
pulumi:providers:github getbranches  
gcp:organizations:Project main-project  
@ Previewing update....
pulumi:providers:google-native google-native-main-provider  
pulumi:providers:gcp google-main-provider  
@ Previewing update....
~  google-native:cloudresourcemanager/v3:ProjectIamMember caller-cluster-access update [diff: +member,name,role-resource,version]
google-native:container/v1:Cluster core-cluster  
~  google-native:cloudresourcemanager/v3:ProjectIamMember group:[email protected] update [diff: +member,name,role-resource,version]
~  google-native:cloudresourcemanager/v3:ProjectIamMember main-project-iam-member update [diff: +member,name,role-resource,version]
pulumi:providers:kubernetes k8s-provider  
gcp:projects:Service branches-core-compute.googleapis.com  
gcp:projects:Service branches-core-eventarc.googleapis.com  
gcp:projects:Service branches-core-dns.googleapis.com  
gcp:storage:Bucket postgres-backup  
gcp:projects:Service branches-core-cloudresourcemanager.googleapis.com  
gcp:pubsub:Topic branches-slack-logger  
bjerkio:github:github-with-docker-service abax-procore  
gcp:projects:Service branches-core-logging.googleapis.com  
bjerkio:github:github-with-docker-service tripletex-project-reporter  
gcp:projects:Service branches-core-stackdriver.googleapis.com  
bjerkio:github:github-with-docker-service abax-minuba  
gcp:projects:Service branches-core-monitoring.googleapis.com  
gcp:projects:Service branches-core-cloudtrace.googleapis.com  
gcp:serviceAccount:Account branches-slack-logger  
gcp:iam:WorkloadIdentityPool main-github  
gcp:projects:Service branches-core-clouderrorreporting.googleapis.com  
gcp:serviceAccount:Account postgres-backup  
gcp:projects:Service branches-core-cloudprofiler.googleapis.com  
gcp:projects:Service branches-core-sqladmin.googleapis.com  
gcp:projects:Service branches-core-servicemanagement.googleapis.com  
gcp:projects:Service branches-core-cloudkms.googleapis.com  
gcp:projects:Service branches-core-servicecontrol.googleapis.com  
gcp:projects:Service branches-core-cloudfunctions.googleapis.com  
gcp:projects:Service branches-core-container.googleapis.com  
gcp:projects:Service branches-core-run.googleapis.com  
gcp:projects:Service branches-core-cloudbuild.googleapis.com  
gcp:projects:Service branches-core-cloudbilling.googleapis.com  
gcp:projects:Service branches-core-iamcredentials.googleapis.com  
gcp:projects:Service branches-core-iam.googleapis.com  
gcp:projects:Service branches-core-artifactregistry.googleapis.com  
@ Previewing update........
kubernetes:core/v1:Secret todoist-github-secrets  
branches:k8s:standard-database abax-minuba  
kubernetes:core/v1:Secret vaultwarden-yubico-secret  
branches:k8s:standard-deployment abax-minuba-ui  
kubernetes:helm.sh/v3:Chart caddy-ingress  
branches:k8s:standard-deployment abax-procore  
kubernetes:helm.sh/v3:Chart postgres-operator  
kubernetes:core/v1:Namespace caddy-system  
@ Previewing update....
kubernetes:acid.zalan.do/v1:postgresql unleash  
kubernetes:acid.zalan.do/v1:postgresql vaultwarden  
kubernetes:core/v1:Secret vaultwarden-admin-token  
kubernetes:core/v1:Secret reports-tripletex-secrets  
gcp:logging:ProjectSink branches-slack-logger  
gcp:serviceAccount:Account abax-procore  
github:index:ActionsSecret abax-procore-google-projects  
gcp:serviceAccount:Account abax-minuba  
github:index:ActionsSecret abax-minuba-google-projects  
gcp:serviceAccount:Account tripletex-project-reporter  
github:index:ActionsSecret tripletex-project-reporter-google-projects  
gcp:projects:IAMMember branches-slack-logger  
gcp:cloudrunv2:Service branches-slack-logger  
gcp:iam:WorkloadIdentityPoolProvider main-github  
gcp:storage:BucketIAMMember postgres-backup  [diff: ~bucket]
gcp:serviceAccount:IAMMember postgres-backup  
gcp:artifactregistry:Repository artifact-registry  
kubernetes:apps/v1:Deployment todoist-github-deployment  
kubernetes:acid.zalan.do/v1:postgresql abax-minuba  
kubernetes:core/v1:Secret abax-minuba-ui  
kubernetes:core/v1:Secret abax-procore  
kubernetes:apps/v1:Deployment unleash-deployment  
kubernetes:apps/v1:Deployment vaultwarden-deployment  
kubernetes:apps/v1:Deployment tripletex-project-reporter-deployment  
gcp:pubsub:TopicIAMMember branches-slack-logger  [diff: ~topic]
github:index:ActionsSecret abax-procore-service-account  
gcp:projects:IAMMember abax-procore  
gcp:serviceAccount:IAMMember iam-workload-abax-procore  
gcp:serviceAccount:IAMMember iam-infra-token-abax-procore  
github:index:ActionsSecret abax-minuba-service-account  
gcp:projects:IAMMember abax-minuba  
gcp:serviceAccount:IAMMember iam-workload-abax-minuba  
gcp:serviceAccount:IAMMember iam-infra-token-abax-minuba  
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole caddy-system/caddy-ingress-controller-role  [diff: ~metadata]
kubernetes:apps/v1:Deployment caddy-system/caddy-ingress-caddy-ingress-controller  
kubernetes:core/v1:ServiceAccount caddy-system/caddy-ingress-controller  
kubernetes:core/v1:ConfigMap caddy-system/caddy-ingress-controller-configmap  
kubernetes:policy/v1:PodDisruptionBudget caddy-system/caddy-ingress-caddy-ingress-controller  
kubernetes:core/v1:Service caddy-system/caddy-ingress-caddy-ingress-controller  
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding caddy-system/caddy-ingress-controller-role-binding  [diff: ~metadata]
github:index:ActionsSecret tripletex-project-reporter-service-account  
gcp:projects:IAMMember tripletex-project-reporter  
gcp:serviceAccount:IAMMember iam-workload-tripletex-project-reporter  
gcp:serviceAccount:IAMMember iam-infra-token-tripletex-project-reporter  
gcp:cloudrunv2:ServiceIamMember branches-slack-logger  [diff: ~name]
gcp:eventarc:Trigger branches-slack-logger  
github:index:ActionsSecret abax-minuba-identity-provider  
github:index:ActionsSecret abax-procore-identity-provider  
github:index:ActionsSecret tripletex-project-reporter-identity-provider  
kubernetes:core/v1:ServiceAccount postgres-backup  
github:index:ActionsSecret tripletex-project-reporter-container-repository  
github:index:ActionsSecret abax-minuba-container-repository  
gcp:artifactregistry:RepositoryIamMember abax-procore  
gcp:artifactregistry:RepositoryIamMember abax-minuba  
gcp:artifactregistry:RepositoryIamMember tripletex-project-reporter  
github:index:ActionsSecret abax-procore-container-repository  
@ Previewing update....
kubernetes:core/v1:Service todoist-github-service  
kubernetes:core/v1:Service unleash-service  
kubernetes:apps/v1:Deployment abax-minuba-ui  
kubernetes:apps/v1:Deployment abax-procore  
kubernetes:core/v1:Service vaultwarden-service  
kubernetes:core/v1:Service tripletex-project-reporter-service  
kubernetes:networking.k8s.io/v1:Ingress todoist-github-ingress  
kubernetes:networking.k8s.io/v1:Ingress unleash-ingress  
kubernetes:core/v1:Service abax-minuba-ui  
kubernetes:batch/v1:CronJob abax-minuba-cronjob  
kubernetes:core/v1:Service abax-procore  
kubernetes:batch/v1:CronJob abax-procore-cronjob  
kubernetes:networking.k8s.io/v1:Ingress vaultwarden-ingress  
kubernetes:networking.k8s.io/v1:Ingress tripletex-project-reporter-ingress  
kubernetes:networking.k8s.io/v1:Ingress abax-minuba-ui  
kubernetes:networking.k8s.io/v1:Ingress abax-procore  
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole postgres-backup  
kubernetes:core/v1:Service default/postgres-operator  
kubernetes:apiextensions.k8s.io/v1:CustomResourceDefinition postgresqls.acid.zalan.do  
kubernetes:apiextensions.k8s.io/v1:CustomResourceDefinition postgresteams.acid.zalan.do  
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding postgres-operator  
@ Previewing update....
kubernetes:core/v1:ServiceAccount default/postgres-operator  
kubernetes:apps/v1:Deployment default/postgres-operator  
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole postgres-operator  
kubernetes:apiextensions.k8s.io/v1:CustomResourceDefinition operatorconfigurations.acid.zalan.do  
kubernetes:acid.zalan.do/v1:OperatorConfiguration default/postgres-operator  
pulumi:pulumi:Stack branches-main-main  

Resources:
~ 3 to update
128 unchanged

[simenandre]

Remember to import calendar-agent.ts somewhere.