![Riabokon Stanislav(EPAM)[GCP]'s avatar](https://secure.gravatar.com/avatar/b616272b81055d50e0facfaf0b22cb0d438cd3e3de42663c349fc6f075ed1051?s=64&d=identicon "Riabokon Stanislav(EPAM)[GCP]")
Code owners
Assign users and groups as approvers for specific file changes. Learn more.
README.md 3.25 KiB
Service Configuration for GCP
Table of Contents
- Environment variables
- Common properties for all environments
- For Mappers to activate drivers
- For Google Cloud only
- GCS configuration
- Google cloud service account configuration
Environment variables
Common properties for all environments
| name | value | description | sensitive? | source |
|---|---|---|---|---|
APP_ENTITLEMENTS |
ex https://entitlements.com/entitlements/v1
|
Entitlements API endpoint | no | output of infrastructure deployment |
APP_REGISTER |
ex https://register.com/api/register/v1
|
Storage API endpoint | no | output of infrastructure deployment |
APP_PROJECT |
ex opendes
|
Google Cloud Project Id | no | output of infrastructure deployment |
PARTITION_API |
ex http://localhost:8081/api/partition/v1
|
Partition service endpoint | no | - |
SERVICE_TOKEN_PROVIDER |
ex GCP or OPENID
|
Service token provider | no | - |
System Environment required to run service
| name | value | description | sensitive? | source |
|---|---|---|---|---|
SPRING_PROFILES_ACTIVE |
gcp |
spring active profile | no |
For Mappers to activate drivers
| name | value | description |
|---|---|---|
| OQMDRIVER | pubsub | to activate OQM driver for Google PubSub |
| OQMDRIVER | rabbitmq | to activate OQM driver for Rabbit MQ |
For Google Cloud only
| name | value | description | sensitive? | source |
|---|---|---|---|---|
APP_PROJECT |
ex opendes
|
Google Cloud Project Id | no | output of infrastructure deployment |
GOOGLE_AUDIENCES |
ex *****.apps.googleusercontent.com
|
Client ID for getting access to cloud resources | yes | https://console.cloud.google.com/apis/credentials |
service account IAM roles
Also, the following IAM roles should be assigned to the service's Google service account (SA)
| IAM role | The purpose |
|---|---|
| Service Account Token Creator | To write yourself JWT for requesting neighbor microservices |
| Pub/Sub Editor | To fetch available PubSub topics and subscriptions and be able to create them |
Pubsub configuration:
At Pubsub should be created topic with name:
name: register-subscriber-control
It can be overridden by:
- through the Spring Boot property
oqm-register-subscriber-control-topic-name - environment variable
OQM_REGISTER_SUBSCRIBER_CONTROL_TOPIC_NAME