As a user I should have my new tenant integrated with alerts management

Description

PRDE - Story default text according to the team DoR (Definition of Ready)

01 - PERSON OF CONTACT (PERSON THAT CAN ANSWER QUESTIONS ABOUT THE PROBLEM):
02 - STORY BRIEFING (AS A < PERSONA >, I [WANT TO] < NEED >, [SO THAT] < GOAL >):
03 - PROBLEM (WHAT'S THE CURRENT PROBLEM SCENARIO OR PAIN TO BE RESOLVED?):

Get details we need to enable and configure when creating a new project on GCP.

04 - GOAL (DESCRIBE THE PROPOSED SOLUTION):
05 - WHO CAN USE THIS FEATURE (USER ROLES):
06 - ACTIVITY DIAGRAM (ACTIVITY DIAGRAM LINK AND IMAGE):
07 - STEPS (ACTIONS TO BE PERFORMED LINKING TO SCREENSHOTS):
08 - ALTERNATIVE STEPS:
09 - ASSETS (FIGMA LINKS, RELEVANT DOCUMENTATION LINKS, JSON EXAMPLES, ETC):
10 - ACCEPTANCE CRITERIA:

  • List of services needed by Alerts Management:
    • Create an global service account to handle sinks creation and pubsub publishing
      • This new service account need to create logging sinks in all projects in the GCP Org totvslab.com
      • This account need the roles/pubsub.publisher for labs-alma-event-sink and labs-carol-assist-homolog-sink PubSub topics in the labs-alertmanager-production project.
    • For each new GCP Project in the Data Provisioning process:
      • enable pubsub.googleapis.com api
      • enable logging.googleapis.com api
      • create a logging sink in the new tenant project with this filter "protoPayload.serviceName=\"bigquery.googleapis.com\" AND severity=\"ERROR\"", using the global sink service account as customWriterIdentity parameter. The sink destination will be one of the following pubsub topic:
        • Sandbox deploys: all sinks have to be created using labs-carol-assist-homolog-sink topic
        • Production deploys: all sinks have to be created using labs-alma-event-sink topic
  • Every new tenants should have this list of services enabled.

Do not part of this issue:

  • We need to enable the same list of services for all existing tenants.