updated cloud run service with role binding to write to bigquery

Author: mayuthombre

infrastructure/gcp/bigquery_component.py

@@ -1,9 +1,13 @@
 import json
 
 from cdktf_cdktf_provider_google import (
-    bigquery_dataset, bigquery_table,
-    data_google_bigquery_default_service_account, kms_crypto_key,
-    kms_crypto_key_iam_binding, kms_key_ring)
+    bigquery_dataset, 
+    bigquery_table,
+    data_google_bigquery_default_service_account, 
+    kms_crypto_key,
+    kms_crypto_key_iam_binding, 
+    kms_key_ring
+)
 from constructs import Construct
 
 

infrastructure/gcp/cloudrun_component.py

@@ -26,7 +26,7 @@ def __init__(
                 "spec": {
                     "containers": [
                         {
-                            "image": "australia-southeast1-docker.pkg.dev/contino-squad0-fc/flight-contoller-event-receiver/event_receiver:latest",
+                            "image": "australia-southeast1-docker.pkg.dev/contino-squad0-fc/flight-controller-event-receiver/event_receiver:latest",
                             "ports": [{"container_port": 8080}],
                         },
                     ],
@@ -38,7 +38,7 @@ def __init__(
         self.bigquery_job = project_iam_member.ProjectIamMember(
             self,
             "bigquery_job",
-            role="roles/bigquery.jobUser",
+            role="roles/bigquery.dataEditor",
             member=f"serviceAccount:{cloudrun_account.email}",
             project=project_id,
         )

infrastructure/gcp/eventarc_with_pubsub_component.py

@@ -1,8 +1,13 @@
-from cdktf_cdktf_provider_google import (cloud_run_service, eventarc_trigger,
-                                         kms_crypto_key,
-                                         kms_crypto_key_iam_binding,
-                                         kms_key_ring, project_iam_binding,
-                                         pubsub_topic, service_account)
+from cdktf_cdktf_provider_google import (
+    cloud_run_service, 
+    eventarc_trigger,
+    kms_crypto_key,
+    kms_crypto_key_iam_binding,
+    kms_key_ring, 
+    project_iam_binding,
+    pubsub_topic, 
+    service_account,
+)
 from constructs import Construct
 
 
@@ -86,3 +91,11 @@ def __init__(
             role="roles/eventarc.eventReceiver",
             members=[f"serviceAccount:{cloudrun_account.email}"],
         )
+
+        self.eventarc = project_iam_binding.ProjectIamBinding(
+            self,
+            "eventarc_binding",
+            project=project_id,
+            role="roles/run.invoker",
+            members=[f"serviceAccount:{service_account.email}"],
+        )

infrastructure/gcp/main.py

@@ -140,9 +140,9 @@ def __init__(
             NAME_PREFIX,
             DOMAIN_NAME
         )
-        # self.grafana_workspace_id = lb_component.global_address.address
 
-# GCP Grafana Stack
+
+## GCP Grafana Stack
 # class GcpGrafana(TerraformStack):
 #     def __init__(self, scope: Construct, id: str, workspace_id: str,):
 #         super().__init__(scope, id)
@@ -151,8 +151,7 @@ def __init__(
 #             self,
 #             "Grafana",
 #             auth="",
-#             url=workspace_id
-#             + ":80",
+#             url="https://"+DOMAIN_NAME
 #         )
 
 #         # Create Grafana dashboard

infrastructure/gcp/service_account_component.py

@@ -19,5 +19,7 @@ def __init__(
         )
 
         self.cloud_run = service_account.ServiceAccount(
-            self, "cloud-run", project=project_id, account_id="fc-cloud-run"
+            self, "cloud-run", 
+            project=project_id, 
+            account_id="fc-cloud-run"
         )