apiVersion: logging.cnrm.cloud.google.com/v1beta1
kind: LoggingLogBucket
metadata:
  name: tenant-workloads
  annotations:
    cnrm.cloud.google.com/reconcile-interval-in-seconds: "6200"
spec:
  description: Tenant workloads log bucket
  location: global
  locked: false
  projectRef:
    external: ${gcp_project_id}
  retentionDays: 30
---
apiVersion: logging.cnrm.cloud.google.com/v1beta1
kind: LoggingLogSink
metadata:
  name: tenant-workloads-logsink
  annotations:
    cnrm.cloud.google.com/reconcile-interval-in-seconds: "6200"
spec:
  destination:
    loggingLogBucketRef:
      external: logging.googleapis.com/projects/${gcp_project_id}/locations/global/buckets/tenant-workloads
  filter: |-
    jsonPayload.kubernetes.namespace.labels."workload.edge.ncr.com"=~"helm|tenant"
  projectRef:
    external: ${gcp_project_id}
  uniqueWriterIdentity: true