fix: use email for cron job acl alerting (#253)

k4leung4 · web-flow · commit 02050bb8d75c · 2024-04-08T15:55:06.000-07:00
Signed-off-by: Kenny Leung &lt;kleung@chainguard.dev&gt;
diff --git a/modules/cron/main.tf b/modules/cron/main.tf
@@ -253,7 +253,7 @@ resource "google_monitoring_alert_policy" "anomalous-job-access" {
         ])}")
       )
       -(
-        protoPayload.authenticationInfo.principalEmail=~"${join("|", concat(var.invokers, [data.google_client_openid_userinfo.me]))}"
+        protoPayload.authenticationInfo.principalEmail=~"${join("|", concat(var.invokers, [data.google_client_openid_userinfo.me.email]))}"
         protoPayload.methodName="google.cloud.run.v1.Jobs.RunJob"
       )
       EOT

Original file line number	Diff line number	Diff line change
`@@ -253,7 +253,7 @@ resource "google_monitoring_alert_policy" "anomalous-job-access" {`
`253`	`253`	`])}")`
`254`	`254`	`)`
`255`	`255`	`-(`
`256`		`- protoPayload.authenticationInfo.principalEmail=~"${join("\|", concat(var.invokers, [data.google_client_openid_userinfo.me]))}"`
	`256`	`+ protoPayload.authenticationInfo.principalEmail=~"${join("\|", concat(var.invokers, [data.google_client_openid_userinfo.me.email]))}"`
`257`	`257`	`protoPayload.methodName="google.cloud.run.v1.Jobs.RunJob"`
`258`	`258`	`)`
`259`	`259`	`EOT`