Ternary

https://docs.ternary.app/docs
Admin
Ternary streamlines data ingestion, allocation, anomaly detection, forecasting, and shared workflows...
Tokens:61,804
Snippets:648
Trust Score:8.7
Update:10 months ago
Show doc for...
Tokens:
Raw
### Terraform Module for Azure Permissions and Cost Export Setup

Source: https://docs.ternary.app/docs/microsoft-azure

This Terraform module automates the setup of Azure resources and permissions required for Ternary to access your Azure cost and usage data. It requires your Azure Billing Account ID, the path to your downloaded Ternary Azure certificate, and a list of entities (subscriptions, management groups) Ternary should have visibility into. Upon successful deployment, it outputs necessary IDs and paths for Ternary configuration.

```terraform
module "ternary" {
  source = "https://github.com/TernaryInc/ternary-onb-permissions.git//azure/terraform?ref=master"

  billing_account_id      = "MY_MICROSOFT_BILLING_ACCOUNT_ID"
  client_certificate_path = "/path/to/your/Ternary_Azure.pem"
  enhanced_access_scopes = [
    "/providers/Microsoft.Management/managementGroups/MY-ROOT-MANAGEMENT-GROUP-GUID"
  ]
}

output "ternary_directory_id" { value = module.ternary.directory_id }
output "ternary_app_id" { value = module.ternary.app_id }
output "ternary_storage_account" { value = module.ternary.storage_account }
output "ternary_storage_container" { value = module.ternary.storage_container }
output "ternary_actuals_path" { value = module.ternary.actuals_path }
output "ternary_amortized_path" { value = module.ternary.amortized_path }

provider "azuread" {
  tenant_id = "my-active-directory-tenant-id"
}

provider "azurerm" {
  features {}
}
```

--------------------------------

### Verify Ternary Client Certificate with OpenSSL

Source: https://docs.ternary.app/docs/microsoft-azure

This command verifies that a downloaded client certificate (Ternary_Azure.pem) is authentic and signed by the Ternary Root CA. It requires the `openssl` command-line tool and the `ca.pem` file, which should be downloaded separately from Ternary's public GitHub repository. Successful verification outputs 'OK'.

```shell
openssl verify -CAfile ca.pem Ternary_Azure.pem
```

--------------------------------

### Create Ternary Custom IAM Role (gcloud)

Source: https://docs.ternary.app/docs/google-cloud-platform

This command creates a custom IAM role named 'TernaryCMPServiceAgent' at the GCP organization level. This role grants Ternary specific permissions required for its operations. The role definition is provided in the 'role.yaml' file. Ensure you replace 'YOUR_ID' with your actual GCP Organization ID.

```bash
gcloud iam roles create TernaryCMPServiceAgent --organization=YOUR_ID --file=role.yaml
```

--------------------------------

### GCP Metrics Explorer Query for Kubernetes CPU Usage

Source: https://docs.ternary.app/docs/kubernetes-insights-google-kubernetes-engine

This query demonstrates how to retrieve Kubernetes Container CPU Usage Time metrics from Google Cloud Monitoring. It specifies filters, grouping, alignment, and period for the data, useful for validating metric generation.

```gcp-metrics-explorer
metric: Kubernetes Container - CPU Usage Time

filters: project_id=<your project_id>

groupingFunction: Sum

groupByLabels:
  - cluster_name
  - node_name 
  - top_level_controller_name
  - top_level_controller_type
  - container_name
  - location
  - namespace_name
  - pod_name

perSeriesAligner: Rate

alignmentPeriod: 1h
```

--------------------------------

### List Registered Kubernetes Pod Labels via API

Source: https://docs.ternary.app/docs/reporting-setup-kubernetes-pod-labels-by-api

Retrieves a list of all Kubernetes Pod labels currently registered with Ternary for a given tenant and integration. Requires an access token.

```Shell
curl \
-H "Authorization: Bearer {TERNARY_ACCESS_TOKEN}" \
"https://core-api.ternary.app/api/kubernetes-pod-labels?tenantID={TENANT_ID}&integrationID={INTEGRATION_ID}"
```

--------------------------------

### Bind Ternary Custom Role to Service Account (gcloud)

Source: https://docs.ternary.app/docs/google-cloud-platform

This command binds the previously created 'TernaryCMPServiceAgent' custom role to the Ternary service account. This grants the service account the necessary permissions defined in the custom role. Replace 'YOUR_ID' with your GCP Organization ID and 'SERVICE_ACCOUNT_ID' with your Ternary service account ID.

```bash
gcloud organizations add-iam-policy-binding YOUR_ID
  --member='serviceAccount:SERVICE_ACCOUNT_ID'
  --role='organizations/YOUR_ID/roles/TernaryCMPServiceAgent'
```
Tokens:
Raw