alerting : exclude provisioner for alerting on running cloud run job (#…

…255) do not alert when provisioner runs a cloudrun job. Signed-off-by: Kenny Leung <kleung@chainguard.dev>
chainguard-dev · Apr 9, 2024 · c2c89fd · c2c89fd
1 parent 02050bb
commit c2c89fd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/cron/main.tf b/modules/cron/main.tf
@@ -298,7 +298,7 @@ resource "google_monitoring_alert_policy" "anomalous-job-execution" {
       ])}")
 
       -- Allow the delivery service account to run the job, but flag anyone else
-      -protoPayload.authenticationInfo.principalEmail="${google_service_account.delivery.email}"
+      -protoPayload.authenticationInfo.principalEmail=~"${join("|", [google_service_account.delivery.email, data.google_client_openid_userinfo.me.email])}"
       EOT
 
       label_extractors = {