allow loading of google cloud environment

we will need loki config to load with the gcs-bucket

roles/logs/defaults/main.yml

@@ -5,3 +5,4 @@ logs_bind_dn: "{{ omit }}"
 logs_bind_password: "{{ omit }}"
 logs_loadbalancer_dns_name: "kennyloggin-example.edu"
 logs_bucket_name: "kennyloggin-gcs-bucket"
+logs_gcs_credentials: "service-account-key.json"

roles/logs/handlers/main.yml

@@ -9,3 +9,10 @@
   ansible.builtin.service:
     name: loki
     state: restarted
+
+- name: Reload loki service
+  ansible.builtin.systemd:
+    name: loki
+    daemon_reload: true
+    state: "{{ loki_state | default('reloaded') }}"
+  become: true

roles/logs/tasks/main.yml

@@ -25,6 +25,14 @@
     - loki
     - promtail
 
+- name: Logs | add gcs credentials file
+  ansible.builtin.lineinfile:
+    path: /etc/systemd/system/loki.service
+    search_string: 'Service'
+    insertafter: 'ExecStart=/usr/local/bin/loki --config.file=/path/to/loki-config.yaml'
+    line: 'Environment="GOOGLE_APPLICATION_CREDENTIALS=/etc/loki/{{ logs_gcs_credentials }}"'
+  notity: Reload loki service
+
 - name: Logs | add loki config
   ansible.builtin.template:
     src: config.yml.j2