Commit edef13a8 authored by Adam Robinson's avatar Adam Robinson
Browse files

Merge branch 'fix_audit_retention' into 'master'

fix error with retaining bq logs

See merge request !39
parents 2b4c5080 aa7622a0
......@@ -7,11 +7,6 @@ resource "google_bigquery_dataset" "audit_logs" {
location = "US"
default_table_expiration_ms = 10368000000 #120 Days
# Have to ignore access for changes due to circular dependency
lifecycle {
ignore_changes = ["access"]
}
access {
role = "OWNER"
group_by_email = local.owners_group_email
......@@ -32,6 +27,9 @@ resource "google_bigquery_dataset" "audit_logs" {
//Since these are audit logs, they should not be destroyed
//If a worker is removed this should be removed from the state so that it is preserved
prevent_destroy = true
//Have to ignore access for changes due to circular dependency
ignore_changes = ["access"]
}
depends_on = [ google_project_service.bq-api ]
......@@ -134,4 +132,4 @@ resource "google_storage_bucket_iam_binding" "audit_log_reader" {
members = [
"group:${local.auditor_group_email}",
]
}
\ No newline at end of file
}
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment