deploy datadog to gke clusters

[upodroid]

I deployed this recently to our clusters so upgrading DD version and pushing final tweaks.

[k8s-infra-ci-robot]

Ran Plan for dir: infra/gcp/terraform/kubernetes-public workspace: default

Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # google_pubsub_subscription.kettle_subscription has been deleted
- resource "google_pubsub_subscription" "kettle_subscription" {
        id                           = "projects/kubernetes-public/subscriptions/k8s-infra-kettle-staging"
      - name                         = "k8s-infra-kettle-staging" -> null
        # (11 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # google_container_cluster.cluster will be updated in-place
~ resource "google_container_cluster" "cluster" {
        id                                       = "aaa"
        name                                     = "aaa"
        # (36 unchanged attributes hidden)

      ~ cluster_autoscaling {
            # (3 unchanged attributes hidden)

          ~ auto_provisioning_defaults {
                # (7 unchanged attributes hidden)

              - shielded_instance_config {
                  - enable_integrity_monitoring = false -> null
                  - enable_secure_boot          = false -> null
                }

                # (2 unchanged blocks hidden)
            }

            # (2 unchanged blocks hidden)
        }

        # (30 unchanged blocks hidden)
    }

  # google_pubsub_subscription.kettle_subscription will be created
+ resource "google_pubsub_subscription" "kettle_subscription" {
      + ack_deadline_seconds       = (known after apply)
      + effective_labels           = {
          + "goog-terraform-provisioned" = "true"
        }
      + filter                     = "attributes.eventType = \"OBJECT_FINALIZE\""
      + id                         = (known after apply)
      + message_retention_duration = "604800s"
      + name                       = "k8s-infra-kettle-staging"
      + project                    = "kubernetes-public"
      + terraform_labels           = {
          + "goog-terraform-provisioned" = "true"
        }
      + topic                      = "k8s-infra-kubernetes-jenkins-changes"

      + expiration_policy (known after apply)
    }

  # google_pubsub_subscription_iam_binding.subscription_binding will be created
+ resource "google_pubsub_subscription_iam_binding" "subscription_binding" {
      + etag         = (known after apply)
      + id           = (known after apply)
      + members      = [
          + "serviceAccount:kettle@kubernetes-public.iam.gserviceaccount.com",
        ]
      + project      = "kubernetes-public"
      + role         = "roles/pubsub.editor"
      + subscription = "k8s-infra-kettle-staging"
    }

  # module.iam.google_project_iam_binding.project_iam_authoritative["default--roles/container.admin"] will be created
+ resource "google_project_iam_binding" "project_iam_authoritative" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + members = [
          + "serviceAccount:argocd@k8s-infra-prow.iam.gserviceaccount.com",
        ]
      + project = "kubernetes-public"
      + role    = "roles/container.admin"
    }

Plan: 3 to add, 1 to change, 0 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -d infra/gcp/terraform/kubernetes-public

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -d infra/gcp/terraform/kubernetes-public

Note: Objects have changed outside of Terraform
Plan: 3 to add, 1 to change, 0 to destroy.

---

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock

[k8s-infra-ci-robot]

Ran Plan for dir: infra/gcp/terraform/kubernetes-public workspace: default

Show Output

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # google_pubsub_subscription.kettle_subscription has been deleted
- resource "google_pubsub_subscription" "kettle_subscription" {
        id                           = "projects/kubernetes-public/subscriptions/k8s-infra-kettle-staging"
      - name                         = "k8s-infra-kettle-staging" -> null
        # (11 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
~ update in-place

Terraform will perform the following actions:

  # google_container_cluster.cluster will be updated in-place
~ resource "google_container_cluster" "cluster" {
        id                                       = "aaa"
        name                                     = "aaa"
        # (36 unchanged attributes hidden)

      ~ cluster_autoscaling {
            # (3 unchanged attributes hidden)

          ~ auto_provisioning_defaults {
                # (7 unchanged attributes hidden)

              - shielded_instance_config {
                  - enable_integrity_monitoring = false -> null
                  - enable_secure_boot          = false -> null
                }

                # (2 unchanged blocks hidden)
            }

            # (2 unchanged blocks hidden)
        }

        # (30 unchanged blocks hidden)
    }

  # google_pubsub_subscription.kettle_subscription will be created
+ resource "google_pubsub_subscription" "kettle_subscription" {
      + ack_deadline_seconds       = (known after apply)
      + effective_labels           = {
          + "goog-terraform-provisioned" = "true"
        }
      + filter                     = "attributes.eventType = \"OBJECT_FINALIZE\""
      + id                         = (known after apply)
      + message_retention_duration = "604800s"
      + name                       = "k8s-infra-kettle-staging"
      + project                    = "kubernetes-public"
      + terraform_labels           = {
          + "goog-terraform-provisioned" = "true"
        }
      + topic                      = "k8s-infra-kubernetes-jenkins-changes"

      + expiration_policy (known after apply)
    }

  # google_pubsub_subscription_iam_binding.subscription_binding will be created
+ resource "google_pubsub_subscription_iam_binding" "subscription_binding" {
      + etag         = (known after apply)
      + id           = (known after apply)
      + members      = [
          + "serviceAccount:kettle@kubernetes-public.iam.gserviceaccount.com",
        ]
      + project      = "kubernetes-public"
      + role         = "roles/pubsub.editor"
      + subscription = "k8s-infra-kettle-staging"
    }

  # module.iam.google_project_iam_binding.project_iam_authoritative["default--roles/container.admin"] will be created
+ resource "google_project_iam_binding" "project_iam_authoritative" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + members = [
          + "serviceAccount:argocd@k8s-infra-prow.iam.gserviceaccount.com",
        ]
      + project = "kubernetes-public"
      + role    = "roles/container.admin"
    }

Plan: 3 to add, 1 to change, 0 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -d infra/gcp/terraform/kubernetes-public

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -d infra/gcp/terraform/kubernetes-public

Note: Objects have changed outside of Terraform
Plan: 3 to add, 1 to change, 0 to destroy.

---

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock