Issue quota & billing requests against the provided project

README.md

@@ -91,6 +91,11 @@ jobs:
     for generating the Connect Gateway endpoint. This only applies if
     "use_connect_gateway" is true. Defaults to auto discovery if empty.
 
+-   `quota_project_id` - (Optional) Project ID from which to pull quota. The
+    caller must have `serviceusage.services.use` permission on the project. If
+    unspecified, this defaults to the project of the authenticated principle.
+    This is an advanced setting, most users should leave this blank.
+
 ## Outputs
 
 - Exports env var `KUBECONFIG` which is set to the generated `kubeconfig` file path.

action.yaml

@@ -76,6 +76,14 @@ inputs:
       Defaults to auto discovery if empty.
     required: false
 
+  quota_project_id:
+    description: |-
+      Project ID from which to pull quota. The caller must have
+      serviceusage.services.use permission on the project. If unspecified, this
+      defaults to the project of the authenticated principle. This is an
+      advanced setting, most users should leave this blank.
+    required: false
+
 branding:
   icon: 'lock'
   color: 'blue'

src/gkeClient.ts

@@ -16,6 +16,7 @@
 
 import { presence } from '@google-github-actions/actions-utils';
 import { GoogleAuth } from 'google-auth-library';
+import { Headers } from 'gaxios';
 import YAML from 'yaml';
 
 // Do not listen to the linter - this can NOT be rewritten as an ES6 import statement.
@@ -43,6 +44,7 @@ const membershipResourceNamePattern = new RegExp(
  */
 type ClientOptions = {
   projectID?: string;
+  quotaProjectID?: string;
   location?: string;
 };
 
@@ -130,6 +132,7 @@ export class ClusterClient {
    * resource name.
    */
   readonly #projectID?: string;
+  readonly #quotaProjectID?: string;
   readonly #location?: string;
 
   readonly defaultEndpoint = 'https://container.googleapis.com/v1';
@@ -148,6 +151,7 @@ export class ClusterClient {
     });
 
     this.#projectID = opts?.projectID;
+    this.#quotaProjectID = opts?.quotaProjectID;
     this.#location = opts?.location;
   }
 
@@ -209,9 +213,7 @@ export class ClusterClient {
     const url = `${this.cloudResourceManagerEndpoint}/projects/${projectID}`;
     const resp = (await this.auth.request({
       url: url,
-      headers: {
-        'User-Agent': userAgent,
-      },
+      headers: this.#defaultHeaders(),
     })) as { data: { name: string } };
 
     // projectRef of form projects/<project-num>"
@@ -236,9 +238,7 @@ export class ClusterClient {
     const membershipURL = `${this.hubEndpoint}/${name}`;
     const resp = (await this.auth.request({
       url: membershipURL,
-      headers: {
-        'User-Agent': userAgent,
-      },
+      headers: this.#defaultHeaders(),
     })) as HubMembershipResponse;
 
     const membership = resp.data;
@@ -281,9 +281,7 @@ export class ClusterClient {
     const url = `${this.hubEndpoint}/projects/${projectID}/locations/global/memberships?filter=endpoint.gkeCluster.resourceLink="${clusterResourceLink}"`;
     const resp = (await this.auth.request({
       url: url,
-      headers: {
-        'User-Agent': userAgent,
-      },
+      headers: this.#defaultHeaders(),
     })) as HubMembershipsResponse;
 
     const memberships = resp.data.resources;
@@ -315,9 +313,7 @@ export class ClusterClient {
     const url = `${this.defaultEndpoint}/${this.getResource(clusterName)}`;
     const resp = (await this.auth.request({
       url: url,
-      headers: {
-        'User-Agent': userAgent,
-      },
+      headers: this.#defaultHeaders(),
     })) as ClusterResponse;
     return resp;
   }
@@ -372,6 +368,17 @@ export class ClusterClient {
     };
     return YAML.stringify(kubeConfig);
   }
+
+  #defaultHeaders(): Headers {
+    const h: Headers = {
+      'User-Agent': userAgent,
+    };
+
+    if (this.#quotaProjectID) {
+      h['X-Goog-User-Project'] = this.#quotaProjectID;
+    }
+    return h;
+  }
 }
 
 type cluster = {

src/main.ts

@@ -34,6 +34,7 @@ async function run(): Promise<void> {
   try {
     // Get inputs
     let projectID = getInput('project_id');
+    const quotaProjectID = getInput('quota_project_id');
     let location = getInput('location');
     const clusterName = ClusterClient.parseResourceName(
       getInput('cluster_name', { required: true }),
@@ -95,6 +96,7 @@ async function run(): Promise<void> {
     // Create Container Cluster client
     const client = new ClusterClient({
       projectID: projectID,
+      quotaProjectID: quotaProjectID,
       location: location,
     });