As a user I should have my new tenant integrated with alerts management
Description
PRDE - Story default text according to the team DoR (Definition of Ready)
01 - PERSON OF CONTACT (PERSON THAT CAN ANSWER QUESTIONS ABOUT THE PROBLEM):
02 - STORY BRIEFING (AS A < PERSONA >, I [WANT TO] < NEED >, [SO THAT] < GOAL >):
03 - PROBLEM (WHAT'S THE CURRENT PROBLEM SCENARIO OR PAIN TO BE RESOLVED?):
Get details we need to enable and configure when creating a new project on GCP.
04 - GOAL (DESCRIBE THE PROPOSED SOLUTION):
05 - WHO CAN USE THIS FEATURE (USER ROLES):
06 - ACTIVITY DIAGRAM (ACTIVITY DIAGRAM LINK AND IMAGE):
07 - STEPS (ACTIONS TO BE PERFORMED LINKING TO SCREENSHOTS):
08 - ALTERNATIVE STEPS:
09 - ASSETS (FIGMA LINKS, RELEVANT DOCUMENTATION LINKS, JSON EXAMPLES, ETC):
10 - ACCEPTANCE CRITERIA:
- List of services needed by Alerts Management:
- Create an global service account to handle sinks creation and pubsub publishing
- This new service account need to create logging sinks in all projects in the GCP Org
totvslab.com
- This account need the
roles/pubsub.publisher
forlabs-alma-event-sink
andlabs-carol-assist-homolog-sink
PubSub topics in thelabs-alertmanager-production
project.
- This new service account need to create logging sinks in all projects in the GCP Org
- For each new GCP Project in the Data Provisioning process:
- enable
pubsub.googleapis.com
api - enable
logging.googleapis.com
api - create a
logging sink
in the new tenant project with this filter"protoPayload.serviceName=\"bigquery.googleapis.com\" AND severity=\"ERROR\""
, using the global sink service account ascustomWriterIdentity
parameter. The sink destination will be one of the following pubsub topic:- Sandbox deploys: all sinks have to be created using
labs-carol-assist-homolog-sink
topic - Production deploys: all sinks have to be created using
labs-alma-event-sink
topic
- Sandbox deploys: all sinks have to be created using
- enable
- Create an global service account to handle sinks creation and pubsub publishing
- Every new tenants should have this list of services enabled.
Do not part of this issue:
- We need to enable the same list of services for all existing tenants.