Like, Google (security/ops) nerds try to automate anything that isn't bolted down, and some things that are.
@joepie91 (the CA is https://pki.goog/, it's publicly trusted and it's been available to google cloud users for a few years, but google was using it internally for longer)
@joepie91 I recall Google posting on CA mailing lists asking about how they should do IP address certificates on their ACME CA, which are not even that common