fix config.kubernetes.io/depends-on:

Author: Mathieu Benoit

content/artifact-registry/allow-artifact-registry.md

@@ -46,7 +46,7 @@ metadata:
     cnrm.cloud.google.com/project-id: ${GKE_PROJECT_ID}
     cnrm.cloud.google.com/deletion-policy: "abandon"
     cnrm.cloud.google.com/disable-dependent-services: "false"
-    resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
+    config.kubernetes.io/depends-on: resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
   name: artifactregistry.googleapis.com
   namespace: config-control
 EOF
@@ -67,7 +67,7 @@ metadata:
     cnrm.cloud.google.com/project-id: ${GKE_PROJECT_ID}
     cnrm.cloud.google.com/deletion-policy: "abandon"
     cnrm.cloud.google.com/disable-dependent-services: "false"
-    resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
+    config.kubernetes.io/depends-on: resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
   name: containeranalysis.googleapis.com
   namespace: config-control
 EOF
@@ -79,7 +79,7 @@ metadata:
     cnrm.cloud.google.com/project-id: ${GKE_PROJECT_ID}
     cnrm.cloud.google.com/deletion-policy: "abandon"
     cnrm.cloud.google.com/disable-dependent-services: "false"
-    resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
+    config.kubernetes.io/depends-on: resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
   name: containerscanning.googleapis.com
   namespace: config-control
 EOF

content/gke-cluster/allow-gke hub.md

@@ -46,7 +46,7 @@ metadata:
     cnrm.cloud.google.com/project-id: ${GKE_PROJECT_ID}
     cnrm.cloud.google.com/deletion-policy: "abandon"
     cnrm.cloud.google.com/disable-dependent-services: "false"
-    resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
+    config.kubernetes.io/depends-on: resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
   name: gkehub.googleapis.com
   namespace: config-control
 EOF
@@ -58,7 +58,7 @@ metadata:
     cnrm.cloud.google.com/project-id: ${GKE_PROJECT_ID}
     cnrm.cloud.google.com/deletion-policy: "abandon"
     cnrm.cloud.google.com/disable-dependent-services: "false"
-    resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
+    config.kubernetes.io/depends-on: resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
   name: anthosconfigmanagement.googleapis.com
   namespace: config-control
 EOF

content/gke-cluster/allow-gke.md

@@ -100,7 +100,7 @@ metadata:
     cnrm.cloud.google.com/project-id: ${GKE_PROJECT_ID}
     cnrm.cloud.google.com/deletion-policy: "abandon"
     cnrm.cloud.google.com/disable-dependent-services: "false"
-    resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
+    config.kubernetes.io/depends-on: resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
   name: container.googleapis.com
   namespace: config-control
 EOF

content/ingress-gateway/set-up-cloud-armor.md

@@ -124,6 +124,7 @@ graph TD;
   GKEHubFeature-.->Project
   ArtifactRegistryRepository-.->Project
   GKEHubFeature-.->Project
+  ComputeAddress-.->Project
   ComputeSecurityPolicy-.->Project
   ComputeSSLPolicy-.->Project
   ComputeSubnetwork-->ComputeNetwork

content/ingress-gateway/set-up-ip-address.md

@@ -46,6 +46,35 @@ echo "export INGRESS_GATEWAY_PUBLIC_IP=${INGRESS_GATEWAY_PUBLIC_IP}" >> ~/acm-wo
 
 ## Check deployments
 
+{{< mermaid >}}
+graph TD;
+  ComputeNetwork-.->Project
+  IAMServiceAccount-.->Project
+  GKEHubFeature-.->Project
+  ArtifactRegistryRepository-.->Project
+  GKEHubFeature-.->Project
+  ComputeAddress-.->Project
+  ComputeSecurityPolicy-.->Project
+  ComputeSSLPolicy-.->Project
+  ComputeSubnetwork-->ComputeNetwork
+  ComputeRouterNAT-->ComputeSubnetwork
+  ComputeRouterNAT-->ComputeRouter
+  ComputeRouter-->ComputeNetwork
+  ContainerNodePool-->ContainerCluster
+  ContainerNodePool-->IAMServiceAccount
+  IAMPolicyMember-->IAMServiceAccount
+  IAMPolicyMember-->IAMServiceAccount
+  IAMPolicyMember-->IAMServiceAccount
+  IAMPolicyMember-->IAMServiceAccount
+  IAMPartialPolicy-->IAMServiceAccount
+  ContainerCluster-->ComputeSubnetwork
+  GKEHubFeatureMembership-->GKEHubMembership
+  GKEHubFeatureMembership-->GKEHubFeature
+  GKEHubMembership-->ContainerCluster
+  IAMPolicyMember-->ArtifactRegistryRepository
+  IAMPolicyMember-->IAMServiceAccount
+{{< /mermaid >}}
+
 List the GCP resources created:
 ```Bash
 gcloud compute addresses list \

content/service-mesh/allow-asm.md

@@ -22,7 +22,7 @@ metadata:
     cnrm.cloud.google.com/project-id: ${GKE_PROJECT_ID}
     cnrm.cloud.google.com/deletion-policy: "abandon"
     cnrm.cloud.google.com/disable-dependent-services: "false"
-    resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
+    config.kubernetes.io/depends-on: resourcemanager.cnrm.cloud.google.com/namespaces/config-control/Project/${GKE_PROJECT_ID}
   name: mesh.googleapis.com
   namespace: config-control
 EOF