1619492 - Add GOOGLE_APPLICATION_CREDENTIALS setting pointing to google cloud service account

Status: VERIFIED FIXED

(Cloud Services :: Operations: AMO, task)

Description

[Christopher Grebs [:cgrebs]]

This is a followup for bugzilla.mozilla.org/show_bug.cgi?id=1572873#c25 to add the necessary environment variables to the AMO configuration.

https://cloud.google.com/docs/authentication/production#creating_a_service_account

addons-server is listening for a GOOGLE_APPLICATION_CREDENTIALS environment variable that should contain the path to the mentioned .json file containing the credentials. Unfortunately there's no good way of providing the actual JSON data to the client libraries.

:wezhou already knows about this.

Comment 1

[:wezhou]

Filed https://github.com/mozilla-services/cloudops-deployment/pull/3722 for this.

Comment 2

[:wezhou]

The PR in comment #1 has been merged and deployed to -dev as of 3/6.

:cgrebs, please let us know when we should enable this setting in -stage and -prod respectively.

Thanks.

Comment 3

[William Durand [:willdurand]]

:wezhou I'll let you know for -stage/-prod as soon as I can.

Comment 4

[William Durand [:willdurand]]

:wezhou can we have the credentials deployed in -stage and -prod before this week's push please?

Comment 5

[:wezhou]

It is now deployed to -stage. Please test it.

The config will go out to -prod tomorrow.

Comment 6

[:wezhou]

Deployed this to -prod today.