[google-appengine] Re: Restrict access to "Google App Engine" services from outside invocation

[Sergii Diukarev]

Thank, you. You were right!

I enable IAP and provide access for all my public services with `allUsers` 
role access. But how I can call restricted service now? How do you 
authenticate a request from my local computer (for example curl?)

I tried something like:
curl https://my-private-service-dot-project-tst-01.appspot.com/920/250314/ 
-H "Authorization: Bearer $(gcloud --project=hatsa-tst-01 auth 
print-identity-token)"

On Wednesday, March 18, 2020 at 2:22:51 PM UTC+2, vladoi wrote:
>
>
> Hi,
>
> If you would like to protect certain "App Engine" services from outside 
> invocation, I would recommend using '' Google Cloud Identity Aware Proxy'.
> Identity-Aware Proxy (IAP) lets you manage who has access to services 
> hosted on App Engine. 
> You can turn on IAP and this will  allow only members listed in the 
> permission panel to access your App Engine Services.
>
> [1].https://cloud.google.com/iap/docs
>
> On Wednesday, March 18, 2020 at 11:22:14 AM UTC+1, Serhii Diukarev wrote:
>>
>> Dear Sir/Madam,
>>
>> I am developing a web service(server) for my web application. After 
>> looking at every amazing Google Cloud product, I am thinking of doing the 
>> following to have a secure server on Google Cloud:
>>
>>1. I want to be able to protect (certain) "App Engine" services from 
>>outside invocation. Add security specifications in Cloud Services to 
>> allow 
>>only my app request endpoints. My app running on a node.js server on 
>> Google 
>>App Engine
>>2. I want to be able to make requests from "Cloud Tasks" en "Cloud 
>>Scheduler" to 'protected' "Cloud function" AND "AppEngine" endpoints from 
>>within the Google network.
>>
>> I looking forward to receiving your response!
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/41b4d251-86f3-44d7-9b19-0d5309664084%40googlegroups.com.

[google-appengine] SocketTimeoutException outbound request - spring boot resttemplate

[Ronald Bergmann]

We use the java11 runtime and F1 instances, spring boot 2.2.5 and didn't 
experience the following issues with other apps deployed on GAE.

When trying to perform an outbound (POST) request we end up with an 
SocketTimeoutException:

java.util.concurrent.ExecutionException: 
org.springframework.web.client.ResourceAccessException: I/O error on POST 
request for "https://xyz.tld/": connect timed out; nested exception is 
java.net.SocketTimeoutException: connect timed out
at 
java.base/java.util.concurrent.FutureTask.report(FutureTask.java:122) 
~[na:na]
at java.base/java.util.concurrent.FutureTask.get(FutureTask.java:205) 
~[na:na]
at a.b.c.service.AddressService.get(AddressService.java:63) 
~[classes!/:0-0-4]
at 
a.b.c.rest.AddressRequestsController.d(AddressRequestsController.java:73) 
~[classes!/:0-0-4]
at 
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native 
Method) ~[na:na]
at 
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 
~[na:na]
at 
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
 
~[na:na]
at java.base/java.lang.reflect.Method.invoke(Method.java:566) ~[na:na]
at 
org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:190)
 
~[spring-web-5.2.4.RELEASE.jar!/:5.2.4.RELEASE]
at 
org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:138)
 
~[spring-web-5.2.4.RELEASE.jar!/:5.2.4.RELEASE]
   ...

There's nothing fancy about resttemplate:

restTemplate = new RestTemplateBuilder()
.setConnectTimeout(Duration.ofMillis(CONNECT_TIMEOUT))
.setReadTimeout(Duration.ofMillis(READ_TIMEOUT))
.build();

...

restTemplate.postForEntity(searchUrl, request, String.class);


With timeouts of 5 and 8 seconds.
Runs fine locally and the other end is alive and responsive.

Any ideas what's going wrong?

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/53482cbc-6e50-4461-a323-b0007bb84e6e%40googlegroups.com.

[google-appengine] SocketTimeoutException - HTTP POST - Spring Boot resttemplate

[Ronald Bergmann]

I've posted this before but it seems like the topic just vanished without 
any trace, trying to repost now.

Hey there,

hitting a wall here.

java11 standard environment, F1 instance, Spring Boot 2.2.5 application, 
europe west 3 (FFM)  - trying to perform a POST request via spring boot's 
resttemplate that works fine locally. The host is up and responsive.

java.util.concurrent.ExecutionException: 
org.springframework.web.client.ResourceAccessException: I/O error on POST 
request for "https://www.xyz.tld/": connect timed out; nested exception is 
java.net.SocketTimeoutException: connect timed out
at 
java.base/java.util.concurrent.FutureTask.report(FutureTask.java:122) 
~[na:na]
at java.base/java.util.concurrent.FutureTask.get(FutureTask.java:205) 
~[na:na]
at a.b.c.service.AddressService.get(AddressService.java:63) 
~[classes!/:0-0-4]
at 
a.b.c.rest.AddressRequestsController.d(AddressRequestsController.java:73) 
~[classes!/:0-0-4]
at 
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native 
Method) ~[na:na]
at 
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
 
~[na:na]
at 
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
 
~[na:na]
at java.base/java.lang.reflect.Method.invoke(Method.java:566) ~[na:na]
at 
org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:190)
 
~[spring-web-5.2.4.RELEASE.jar!/:5.2.4.RELEASE]
at 
org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:138)
 
~[spring-web-5.2.4.RELEASE.jar!/:5.2.4.RELEASE]

There's nothing fancy about our configuration or the usage (as far as I can 
see).

restTemplate = new RestTemplateBuilder()
.setConnectTimeout(Duration.ofMillis(CONNECT_TIMEOUT))  // 5 seconds
.setReadTimeout(Duration.ofMillis(READ_TIMEOUT))  // 8 seconds
.build();

restTemplate.postForEntity(searchUrl, request, String.class);


Any ideas?

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/6c7118b6-cd26-40cb-ae0f-ab5b48e65800%40googlegroups.com.

[google-appengine] Re: Need help understand why so many instances are spinning up

['Katayoon (Cloud Platform Support)' via Google App Engine]

Hi Rob,

My assumption is that your task is CPU intensive while you are using the 
default setting in your yaml file which is 1 core 

 
and doesn't seem to be enough for your task to be run successfully. Note 
that, the default target_utilization is 0.5 
.
 
That means, when the average CPU usage across all running instances reaches 
to 50%, the autoscaler would fire up more instances.

So, when your task kicks in, the autoscaler gets notified that the CPU is 
not enough to run the task and it aggressively fire up more instances. 
However, as you mentioned, the task doesn't finish up successfully and it 
gets stuck since it needs at least one powerful CPU to be accomplished. I 
recommend to tweak your setting and consider using more cores in your yaml 
file 

 
to see if it resolves the issue. If the issue still persists, you may 
create a PRIVATE report in the GCP Issue Tracker 
 
and provide us with your project ID, the service ID, and the version ID so 
that we would be able to dig into the issue. 

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/e24de301-d9f0-4760-953c-37b88081a68a%40googlegroups.com.

[google-appengine] Re: struggling for the pass couple of weeks to connect google cloud to mysql and app engine using nodejs

['David (Cloud Platform Support)' via Google App Engine]

This error can happen if you deployed an application before enabling the 
Cloud SQL admin API. I would recommend you to disable/enable the Cloud SQL 
admin API in both projects then redeploy the application.

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/f62e6591-c0dc-48c2-9c93-4490b14a3189%40googlegroups.com.

[google-appengine] Re: Max 10,000 file limit is not suitable for modern full featured wordpress site or any PHP app

[Henry Saldyga]

Our Java GAPE application ( and it's not a free tier with billing enabled ) 
since 2014 was using a Google BLOB storage . 
Since that our clients  performed about 180'000 file uploads . 
Than on February 15th Google BLOB API stopped to upload any files just 
returning 500 Internal server error. 
A private issue  was created and Google support  informed that it was a 
restriction of 10'000 uploads set. 
And on February 28th they simple stopped to respond in the private issue 
board. 
I have to create another project and redirect all clients traffic there. 
But we and our clients experienced a financial losses due to service 
interruption.
Right now on a new project we are getting to 10'000 uploads limit. 
Looks Google support does not care about their clients at all.



On Monday, 23 March 2020 05:07:24 UTC-7, Dmitry Ivanov wrote:
>
> It's an idiotic restriction. The tensorflow package alone contains over 
> 5000 files. I have a tiny app and I exceeded the limit. What were they 
> thinking..
>
> On Monday, 15 April 2019 14:51:02 UTC+1, Shaharia Azam wrote:
>>
>> Hello Everyone,
>> I know this is a common questions but actually this is now becoming more 
>> and more strange to me day by day. Why Google still feels about the hard 
>> limit related to max 10,000 file? If I want to install Wordpress latest 
>> version with any premium themes, few e-commerce related mandatory plugins 
>> then easily from the beginning of my development this would cross 10,000 
>> files. 
>>
>> We are a web solution provider company and we are facing few very hard 
>> questions that is forbidding us to suggest GCP to our client's for their 
>> needs.
>>
>> 1. Advance & Full featured E-Commerce site powered by Wordpress due to 
>> 10,000 file limit issue.
>> 2. SMTP outgoing issue due to block of Port 25. Even our own cPanel 
>> server is hosted on AWS for that. Rest of our servers that doesn't need 
>> email communication are on GCP.
>>
>> Does Google think that it is irrelevant? Even from the quota request 
>> page, this file limit quota can't be increased. In this case, not only us 
>> but also lots of people are going away from using GCP and specially Google 
>> App Engine (our use case depends on it). So I want to hear something from 
>> any internal team members about this. Is there any plan in future to remove 
>> this limit or increase this limit or you are suggesting us to go away from 
>> App engine to somewhere else?
>>
>> - @shaharia
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/a08dcb13-741a-4957-8a35-34b671f6420d%40googlegroups.com.

Re: [google-appengine] Diving into App Engine is soooooooooooo hard now - My analysis

['Olu' via Google App Engine]

Thank you for your feedback, Alexey and I understand your concerns. I 
however encourage you to use the issue tracker links for creation of 
features[1] that you consider would be nice to have on GCP. The team are 
committed to reviewing such requests and considering how these requests fit 
into the GCP Road map. 

Similarly, You could always submit issue links to request clarifications 
and better explanations on particular GCP Documentations that you may be 
using. These requests will be reviewed and forwarded to the Documentation 
team who further review the details and provide the needed updates on the 
Documentation page. 

Our team are always looking for ways to make GCP products and its 
documentation pages better. 

Thank you for your understanding. 

[1]https://cloud.google.com/support/docs/issue-trackers#feature_requests
[2]https://cloud.google.com/support/docs/issue-trackers#trackers-list

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/ad71a401-eeef-469f-abc0-15d2381d2348%40googlegroups.com.

[google-appengine] Re: Google Courses

['Katayoon (Cloud Platform Support)' via Google App Engine]

Hello,

My assumption is that you are getting the error when trying to run a gcloud 
command. If so, could you take these steps 

 
to install a fresh copy of Google Cloud SDK and re-run the gcloud command?  

You may also take a look at this Stack Overflow thread 

 
discussing on the similar issue. If the issue persists, could you provide 
us with more clarification on the issue and the steps you have taken to 
install the Cloud SDK so that we would have a better understanding on the 
issue you are getting?


-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/be594af8-efcb-498c-9de0-8f9f761cee04%40googlegroups.com.

[google-appengine] Google Courses

[DaF Centar]

[image: imgcourses.JPG]
I am trying to deploy Courses on Windows, but I get this massage on the 
img. What do I do from there?

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/dd8d4aea-5908-4eb5-bea6-6f2af444e0fa%40googlegroups.com.

[google-appengine] Re: Max 10,000 file limit is not suitable for modern full featured wordpress site or any PHP app

[Dmitry Ivanov]

It's an idiotic restriction. The tensorflow package alone contains over 
5000 files. I have a tiny app and I exceeded the limit. What were they 
thinking..

On Monday, 15 April 2019 14:51:02 UTC+1, Shaharia Azam wrote:
>
> Hello Everyone,
> I know this is a common questions but actually this is now becoming more 
> and more strange to me day by day. Why Google still feels about the hard 
> limit related to max 10,000 file? If I want to install Wordpress latest 
> version with any premium themes, few e-commerce related mandatory plugins 
> then easily from the beginning of my development this would cross 10,000 
> files. 
>
> We are a web solution provider company and we are facing few very hard 
> questions that is forbidding us to suggest GCP to our client's for their 
> needs.
>
> 1. Advance & Full featured E-Commerce site powered by Wordpress due to 
> 10,000 file limit issue.
> 2. SMTP outgoing issue due to block of Port 25. Even our own cPanel server 
> is hosted on AWS for that. Rest of our servers that doesn't need email 
> communication are on GCP.
>
> Does Google think that it is irrelevant? Even from the quota request page, 
> this file limit quota can't be increased. In this case, not only us but 
> also lots of people are going away from using GCP and specially Google App 
> Engine (our use case depends on it). So I want to hear something from any 
> internal team members about this. Is there any plan in future to remove 
> this limit or increase this limit or you are suggesting us to go away from 
> App engine to somewhere else?
>
> - @shaharia
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/152a539e-0ce9-4214-8a1e-e64ca57fe92a%40googlegroups.com.

[google-appengine] i am trying to deploy small ML model with GCP but having errors. Interestingly that i could find the source of mistake - locally everything is working well

[Volodymyr Gavrysh]

ERROR: (gcloud.app.deploy) Error Response: [9] Cloud build 
492842b5-d2d1-44b2-9977-ae62e70d4398 status: FAILURE.

Build error details: 
{"error":{"errorType":"BuildError","canonicalCode":"INVALID_ARGUMENT","errorId":"E8CA3212","errorMessage":"21
 
Mar 2020 20:43:21 INFO 

Arguments: ['--parser_script=/usr/local/bin/ftl.par', '--src=', 
'--entrypoint=gunicorn -b :$PORT main:app', 
'--name=eu.gcr.io/new-bert-app/app-engine-tmp/app/ttl-2h:1d0704fe-c6be-4904-9686-6f51a6c4f562',
 
'--directory=/workspace', '--destination=/srv', 
'--cache-repository=eu.gcr.io/new-bert-app/app-engine-tmp/build-cache/ttl-7d', 
'--cache', '--builder-output-path=\"\"', 
'--additional-directory=/.googleconfig', 
'--python-cmd=/opt/python3.7/bin/python3.7', '--pip-cmd=/env/bin/python3.7 
-m pip', '--venv-cmd=/opt/python3.7/bin/python3.7 -m venv /env', 
'-v=DEBUG', 
'--base=eu.gcr.io/gae-runtimes/python37:python37_20200223_3_7_6_RC00']\n21 
Mar 2020 20:43:21 INFO Unparsed arguments: 
['--name=eu.gcr.io/new-bert-app/app-engine-tmp/app/ttl-2h:1d0704fe-c6be-4904-9686-6f51a6c4f562',
 
'--directory=/workspace', '--destination=/srv', 
'--cache-repository=eu.gcr.io/new-bert-app/app-engine-tmp/build-cache/ttl-7d', 
'--cache', '--builder-output-path=\"\"', 
'--additional-directory=/.googleconfig', 
'--python-cmd=/opt/python3.7/bin/python3.7', '--pip-cmd=/env/bin/python3.7 
-m pip', '--venv-cmd=/opt/python3.7/bin/python3.7 -m venv /env', 
'-v=DEBUG', 
'--base=eu.gcr.io/gae-runtimes/python37:python37_20200223_3_7_6_RC00']\n21 
Mar 2020 20:43:21 INFO Executing ['/usr/local/bin/ftl.par', 
'--name=eu.gcr.io/new-bert-app/app-engine-tmp/app/ttl-2h:1d0704fe-c6be-4904-9686-6f51a6c4f562',
 
'--directory=/workspace', '--destination=/srv', 
'--cache-repository=eu.gcr.io/new-bert-app/app-engine-tmp/build-cache/ttl-7d', 
'--cache', '--builder-output-path=\"\"', 
'--additional-directory=/.googleconfig', 
'--python-cmd=/opt/python3.7/bin/python3.7', '--pip-cmd=/env/bin/python3.7 
-m pip', '--venv-cmd=/opt/python3.7/bin/python3.7 -m venv /env', 
'-v=DEBUG', 
'--base=eu.gcr.io/gae-runtimes/python37:python37_20200223_3_7_6_RC00']\nINFO  
   FTL version python-v0.17.0\nINFO Beginning FTL build for 
python\nINFO FTL arg passed: virtualenv_dir /env\nINFO FTL arg 
passed: ttl 168\nINFO FTL arg passed: python_cmd 
/opt/python3.7/bin/python3.7\nINFO FTL arg passed: cache True\nINFO
 FTL arg passed: virtualenv_cmd virtualenv\nINFO FTL arg passed: 
entrypoint None\nINFO FTL arg passed: exposed_ports None\nINFO FTL 
arg passed: pip_cmd /env/bin/python3.7 -m pip\nINFO FTL arg passed: 
tar_base_image_path None\nINFO FTL arg passed: export_cache_stats 
False\nINFO FTL arg passed: builder_output_path \"\"\nINFO FTL arg 
passed: destination_path /srv\nINFO FTL arg passed: sh_c_prefix 
False\nINFO FTL arg passed: base 
eu.gcr.io/gae-runtimes/python37:python37_20200223_3_7_6_RC00\nINFO FTL 
arg passed: cache_key_version v0.17.0\nINFO FTL arg passed: cache_salt 
\nINFO FTL arg passed: cache_repository 
eu.gcr.io/new-bert-app/app-engine-tmp/build-cache/ttl-7d\nINFO FTL arg 
passed: venv_cmd /opt/python3.7/bin/python3.7 -m venv /env\nINFO FTL 
arg passed: name 
eu.gcr.io/new-bert-app/app-engine-tmp/app/ttl-2h:1d0704fe-c6be-4904-9686-6f51a6c4f562\nINFO
  
   FTL arg passed: global_cache False\nINFO FTL arg passed: upload 
True\nINFO FTL arg passed: fail_on_error True\nINFO FTL arg passed: 
output_path None\nINFO FTL arg passed: directory /workspace\nINFO
 FTL arg passed: additional_directory /.googleconfig\nINFO FTL arg 
passed: verbosity DEBUG\nINFO starting: full build\nINFO starting: 
builder initialization\nINFO Loading Docker credentials for repository 
'eu.gcr.io/gae-runtimes/python37:python37_20200223_3_7_6_RC00'\nINFO
 Loading Docker credentials for repository 
'eu.gcr.io/new-bert-app/app-engine-tmp/app/ttl-2h:1d0704fe-c6be-4904-9686-6f51a6c4f562'\nINFO
  
   builder initialization took 0 seconds\nINFO starting: build process 
for FTL image\nINFO starting: checking_cached_interpreter_layer\nINFO  
   starting: check python version\nINFO `python version` full 
cmd:\n/opt/python3.7/bin/python3.7 --version\nINFO `python version` 
stderr:\n\nINFO .

Any suggestion?

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/31354226-6abf-4a44-adc7-1869ea760048%40googlegroups.com.

[google-appengine] Phishing Scam in Google Groups https://groups.google.com/forum/#!topic/oildaily/cDDgqFvGufQ

[iZOOlabs Gsoc]

Hello Team,

My name is Emjei Anderson from iZOOlogic. Reporting on behalf of our client 


We want to report a phishing and scam incident regarding a google topic 
found here https://groups.google.com/forum/#!topic/oildaily/cDDgqFvGufQ

A customer of a European bank website is maliciously posted as for sale in 
the public through Google forums. "Customer business account offered for 
sale on public website" The request came from the bank themselves. If you 
wish to know more about the claimant and the validity of the report please 
do contact us at izool...@izoologic.com.

Kind Regards,
Emjei Anderson

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/94a854eb-3e3a-4fb2-b6ae-26019047b13d%40googlegroups.com.

Re: [google-appengine] Re: Deploy Laravel app on google app engine! INVALID_ARGUMENT: Network 'default' does not exist

[Ben Abdesslem Sarah]

Thank you so much for your help!
But I still don't know how to find the  EXISTING_GCE_INSTANCE_NAME ?
Where can I find this information?
I tried the project name and the sql instance name !
And of course, it's not working

Sarah

Le ven. 20 mars 2020 à 14:15, 'Pierre-Yves (Google Cloud Support)' via
Google App Engine  a écrit :

> Hi Sarah,
>
> Under the App Engine flex environment, the app is served by underlying
> Compute Engine (GCE) instances already by default. You can read more about
> this here [1]. There is no need to create new ones. When using the “gcloud
> compute instances add-tags” command, the ‘instance-name’ should be the
> actual name of the existing GCE instance, instead of the tag you are
> assigning it. If you want the “instance_tag” to be set as ‘aef-instance’,
> the complete command should look like:
>
> gcloud compute instances add-tags EXISTING_GCE_INSTANCE_NAME --zone
> europe-west1-b --tags aef-instance
>
> You can read more about this command here [2]. Once that instance has been
> tagged properly, you can associate this newly tagged instance with the
> network name in the “network” section of the ‘app.yaml’ file. In order to
> get the existing GCE instance name, you may look at the bottom of the page
> from the Instances page [3] of your project in the Console. Make sure the
> correct service is selected in the dropdown menu at the top.
>
> [1] https://cloud.google.com/appengine/docs/flexible#features
> [2]
> https://cloud.google.com/sdk/gcloud/reference/compute/instances/add-tags
> [3] https://console.cloud.google.com/appengine/instances
>
> On Thursday, March 19, 2020 at 2:41:17 PM UTC-4, Ben Abdesslem Sarah wrote:
>>
>> Hello,
>>
>> I can't create that tag and still don't know why ?
>>
>> C:\someproject>*gcloud compute instances add-tags aef-instance --zone
>> europe-west1-b --tags mynetwork*
>> ERROR: (gcloud.compute.instances.add-tags) Could not fetch resource:
>>  - *The resource
>> 'projects/*/zones/europe-west1-b/instances/aef-instance' was
>> not found*
>>
>> Do I need to create a VM instance first or a firewall-rules before ?
>> Like that : gcloud compute firewall-rules create
>>
>>  Thank you so much for your help !!
>> Sarah
>>
>> Le mer. 18 mars 2020 à 17:33, 'Pierre-Yves (Google Cloud Support)' via
>> Google App Engine  a écrit :
>>
>>> As previously mentioned, the "aef-instance" tag was probably not added
>>> prior to being referenced in the "app.yaml" file. Here is the documentation
>>> [1] on how to properly set the network settings in the configuration file,
>>> with an explanation on the "instance_tag" and "name" option. Here is how
>>> [2] to add the network tags that will subsequently be referenced.
>>>
>>> [1]
>>> https://cloud.google.com/appengine/docs/flexible/nodejs/reference/app-yaml#network_settings
>>> [2]
>>> https://cloud.google.com/vpc/docs/add-remove-network-tags#adding_new_tags_to_vm_instances
>>>
>>> On Wednesday, March 18, 2020 at 9:35:03 AM UTC-4, Ben Abdesslem Sarah
>>> wrote:

 Hello,

 Thank you, you're right for the identation.
 But now I'm getting another error about the network.
 At this line in app.yaml : "name: mynetwork "

 Here is the error message:
 Finished Step #1
 PUSH
 DONE

 

 ERROR: (gcloud.app.deploy) INVALID_ARGUMENT: Network 'mynetwork' does
 not exist

 And that's my app.yaml file :

 runtime: php
 env: flex

 runtime_config:
  document_root: public

 skip_files:
  - .env

 network:
   instance_tag: aef-instance
   name: mynetwork
   subnetwork_name: subnetwork1

 env_variables:
  APP_ENV: local
  APP_DEBUG : true
  APP_KEY: base64:/iOQ=
  APP_STORAGE: /tmp
  VIEW_COMPILED_PATH: /tmp

  CACHE_DRIVER: database
  SESSION_DRIVER: database
  APP_LOG: daily
  APP_TIMEZONE: UTC
  DB_CONNECTION: mysql
  DB_HOST: localhost
  DB_PORT: 3306
  DB_DATABASE: **
  DB_USERNAME: root
  DB_PASSWORD: **
  DB_SOCKET: /cloudsql/*:europe-west1:*

  QUEUE_DRIVER: database
  MAIL_MAILER: smtp
  MAIL_HOST: smtp.mailtrap.io
  MAIL_PORT: 2525
  MAIL_USERNAME: null
  MAIL_PASSWORD: null

  GOOGLE_VISION_PROJECT_ID : *




 Thanks in advance !!!

 Le lun. 16 mars 2020 à 23:28, Mua Rachmann  a
 écrit :

> The error indicates your yaml file is not properly formatted.
> Try checking your indentation somewhere. Maybe something is not well
> aligned or given more spacing somewhere.
> Generally it is two(2) spacing something of the sort. Let me know if
> the error still persists. For instance take a look at your
>
> beta_setti