Merge pull request #2409 from ameukam/bigquery-transfer-artificats-gc…

…slogs

Transfer Bigquery dataset to k8s-infra-public-pii

infra/gcp/clusters/projects/k8s-infra-public-pii/bigquery.tf

@@ -0,0 +1,34 @@
+
+// Service account dedicated for BigQuery Data Transfer
+resource "google_service_account" "bq_data_transfer_writer" {
+  account_id  = "bq-data-transfer"
+  description = "Service Acccount BigQuery Data Transfer"
+}
+
+// grant bigquery dataEditor role to the service account so that scheduled query can run
+resource "google_project_iam_member" "bq_data_transfer_writer_binding" {
+  project = google_project.project.project_id
+  role    = "roles/bigquery.dataEditor"
+  member  = "serviceAccount:${google_service_account.bq_data_transfer_writer.email}"
+}
+
+resource "google_bigquery_data_transfer_config" "bq_data_transfer" {
+  display_name           = "BigQuey data transfer to ${google_bigquery_dataset.audit-logs-gcs.dataset_id}"
+  project                = google_project.project.project_id
+  data_source_id         = "k8s-infra-ii-sandbox.riaan_data_store"
+  schedule               = "every 24 hours" #Times are in UTC
+  destination_dataset_id = google_bigquery_dataset.audit-logs-gcs.dataset_id
+  service_account_name   = google_service_account.bq_data_transfer_writer.email
+
+  params = {
+    write_disposition = "WRITE_TRUNCATE" #Overwrite existing data
+  }
+
+  schedule_options {
+    start_time = "15h00" #in UTC
+  }
+
+  email_preferences {
+    enable_failure_email = true
+  }
+}