Allow customizing log retention period

terraform/main.tf

@@ -53,6 +53,7 @@ resource "google_project_service" "services" {
     "firebase.googleapis.com",
     "iam.googleapis.com",
     "identitytoolkit.googleapis.com",
+    "logging.googleapis.com",
     "monitoring.googleapis.com",
     "redis.googleapis.com",
     "run.googleapis.com",
@@ -110,6 +111,18 @@ resource "google_vpc_access_connector" "connector" {
   ]
 }
 
+resource "google_logging_project_bucket_config" "basic" {
+  project        = var.project
+  location       = "global"
+  retention_days = var.log_retention_period
+  bucket_id      = "_Default"
+
+  depends_on = [
+    google_project_service.services["logging.googleapis.com"],
+    google_project_service.services["stackdriver.googleapis.com"],
+  ]
+}
+
 resource "null_resource" "build" {
   provisioner "local-exec" {
     environment = {

terraform/variables.tf

@@ -251,6 +251,12 @@ variable "enable_lb_logging" {
   EOT
 }
 
+variable "log_retention_period" {
+  type        = number
+  default     = 14
+  description = "Number of days to retain logs for all services in the project"
+}
+
 // Note: in Cloud Run/Knative, there are two kinds of annotations.
 // - Service level annotations: applies to all revisions in the service. E.g.
 //   the ingress restriction