一个误封账号，八小时宕机——Railway 事故背后的云依赖陷阱

# organization.tf — 组织与项目隔离结构

resource "google_folder" "production" {
  parent       = "organizations/YOUR_ORG_ID"
  display_name = "production"
}

resource "google_folder" "infrastructure" {
  parent       = "organizations/YOUR_ORG_ID"
  display_name = "infrastructure"
}

# 生产工作负载项目 — 只跑应用
resource "google_project" "prod_workload" {
  name            = "prod-workload"
  project_id      = "prod-workload-2026"
  folder_id       = google_folder.production.id
  billing_account = "BILLING_ACCOUNT_A"
}

# 基础设施控制面项目 — 只跑 DNS、监控、入口路由
resource "google_project" "infra_control" {
  name            = "infra-control"
  project_id      = "infra-control-2026"
  folder_id       = google_folder.infrastructure.id
  billing_account = "BILLING_ACCOUNT_B"  # 不同计费账号
}

# shared_vpc.tf — 控制面项目作为 VPC host

resource "google_compute_shared_vpc_host_project" "host" {
  project = google_project.infra_control.project_id
}

resource "google_compute_shared_vpc_service_project" "attach" {
  host_project    = google_project.infra_control.project_id
  service_project = google_project.prod_workload.project_id
}

# health_check.sh — 每分钟检测账号状态，异常时自动切换 DNS

#!/bin/bash
set -euo pipefail

# 检测 GCP 项目是否可达
STATUS=$(gcloud projects describe prod-workload-2026 \
  --format="value(lifecycleState)" 2>/dev/null || echo "ERROR")

if [[ "$STATUS" != "ACTIVE" ]]; then
  echo "⚠️  Account not ACTIVE: $STATUS — triggering failover"

  # 将 DNS 指向维护页面（在控制面项目的另一个区域）
  gcloud dns record-sets transaction start \
    --zone=production-zone \
    --project=infra-control-2026

  gcloud dns record-sets transaction add \
    maintenance.example.com. \
    --type=A \
    --ttl=60 \
    --zone=production-zone \
    --project=infra-control-2026 \
    MAINTENANCE_PAGE_IP

  gcloud dns record-sets transaction execute \
    --zone=production-zone \
    --project=infra-control-2026

  # 发送告警
  curl -X POST "$ALERT_WEBHOOK_URL" \
    -H "Content-Type: application/json" \
    -d "{\"text\": \"GCP account suspended! Status: $STATUS. DNS switched to maintenance page.\"}"
else
  echo "✅ Account ACTIVE"
fi