GCP: Drop transfer job for gs://kubernetes-release

Remove the transfer job used to sync with the community-owned bucket.
Also bump the GCP terraform provider and modules

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>

Author: ameukam

infra/gcp/terraform/k8s-infra-releases-prod/.terraform.lock.hcl

@@ -20,9 +20,6 @@ locals {
   project_id      = "k8s-infra-releases-prod"
 }
 
-data "google_storage_transfer_project_service_account" "default" {
-  project = google_project.project.project_id
-}
 
 resource "google_project" "project" {
   name                = local.project_id
@@ -49,72 +46,3 @@ resource "google_storage_hmac_key" "fastly_reader_key" {
   service_account_email = google_service_account.fastly_reader.email
 }
 
-resource "google_storage_bucket_iam_member" "gcs-backup-bucket" {
-  bucket     = module.k8s_releases_prod.bucket_name
-  role       = "roles/storage.admin"
-  member     = "serviceAccount:${data.google_storage_transfer_project_service_account.default.email}"
-  depends_on = [module.k8s_releases_prod]
-}
-
-resource "google_pubsub_topic" "topic" {
-  project = google_project.project.project_id
-  name    = var.pubsub_topic_name
-}
-
-resource "google_pubsub_topic_iam_member" "notification_config" {
-  project = google_project.project.project_id
-  topic   = google_pubsub_topic.topic.id
-  role    = "roles/pubsub.publisher"
-  member  = "serviceAccount:${data.google_storage_transfer_project_service_account.default.email}"
-}
-
-resource "google_storage_transfer_job" "kubernetes_release_backup" {
-  description = "Daily backup of GCS bucket gs://kubernetes-release"
-  project     = google_project.project.project_id
-
-  transfer_spec {
-    object_conditions {
-      max_time_elapsed_since_last_modification = "600s"
-    }
-
-    transfer_options {
-      delete_objects_unique_in_sink = false
-    }
-
-    gcs_data_source {
-      bucket_name = "kubernetes-release"
-      path        = "release/"
-    }
-
-    gcs_data_sink {
-      bucket_name = module.k8s_releases_prod.bucket_name
-      path        = "release/"
-    }
-  }
-
-  schedule {
-    schedule_start_date {
-      year  = 2023
-      month = 10
-      day   = 30
-    }
-    start_time_of_day {
-      hours   = 17
-      minutes = 33
-      seconds = 0
-      nanos   = 0
-    }
-    repeat_interval = "86400s" # 1 day
-  }
-
-  notification_config {
-    pubsub_topic = google_pubsub_topic.topic.id
-    event_types = [
-      "TRANSFER_OPERATION_SUCCESS",
-      "TRANSFER_OPERATION_FAILED"
-    ]
-    payload_format = "JSON"
-  }
-
-  depends_on = [module.k8s_releases_prod, google_pubsub_topic_iam_member.notification_config]
-}

infra/gcp/terraform/k8s-infra-releases-prod/main.tf

@@ -21,6 +21,7 @@ This file defines:
 */
 
 terraform {
+  required_version = "1.12"
   backend "gcs" {
     bucket = "k8s-infra-tf-k8s-releases"
     prefix = "prod/terraform.tfstate"
@@ -29,11 +30,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = "~> 5.44.0"
+      version = "~> 6.49.3"
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = "~> 5.44.0"
+      version = "~> 6.49.3"
     }
   }
 }

infra/gcp/terraform/k8s-infra-releases-prod/providers.tf

@@ -16,7 +16,7 @@ limitations under the License.
 
 module "secrets" {
   source  = "GoogleCloudPlatform/secret-manager/google"
-  version = "~> 0.3"
+  version = "~> 0.8"
 
   project_id = google_project.project.project_id