[google-appengine] Re: Problem with Uptime Check alerts - stackdriver

['anarayanaswamy' via Google App Engine]

May be it is configuration issue, I would advise to review the uptime 
configurations again. [1]

Note: Dashboards report "no data available" for newly-created uptime 
checks. This message is removed when the data arrives. The maximum wait 
time for this stage is 5 minutes.

[1] 

https://cloud.google.com/monitoring/uptime-checks#create-console


On Friday, May 29, 2020 at 7:47:15 AM UTC-4, Sowmiya Ragu wrote:
>
> Hi Team,
>
> Trying to set up Uptime Check alerts for the App Engine services. When I 
> deploy the service to App Engine sometime it takes nearly 2 hours of time 
> to be available in the Monitoring - Uptime check service list.
> Also sometimes , existing services gets vanished from the service list. 
>
> For instance,
> Deployed 2 services yesterday api/default to a project.
> One service was immediately available in uptime check but not the other'.
>
> Please let us know as why it’s happening.
>
> Regards,
> Sowmiya
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/7d194416-053c-4c57-a817-e4dd8ec96f84%40googlegroups.com.

[google-appengine] Re: Google Cloud Build - build.yaml & app.yaml in a sub directory not building correct source

['Alex Fox' via Google App Engine]

Yes, I saw that SO issue but I couldn't work out what the correct dir: 
value should be.

In both cases the app deploy successfully but in the second case when 
accessing the url I receive a 500 error and the deployed code is only ~600 
bytes which suggests to me it's deployed an empty folder or something like 
that.

This leads me to believe I need to specify the source for the build step, 
but if I am running the cloudbuild from within a subfolder how do I escape 
up the folder tree, e.g. ../../ ?


On Friday, May 29, 2020 at 2:29:28 PM UTC+1, Olu wrote:
>
> Hello, Alex
>
> Can you please provide the specific error obtained while using your second 
> setup that is failing? This will provide more context. Yes, as indicated in 
> this Stackoverflow link[1], it is necessary to specify the DIR in the 
> Cloudbuild.yaml whenever you are trying to trigger your build configuration 
> in a subdirectory. Additionally, with information available to me, I 
> understand you cannot have the app.yaml and the cloudbuild.yaml in the same 
> directory if you are deploying in a non-custom runtime 
>
> [1]
> https://stackoverflow.com/questions/52725046/google-cloud-builder-how-to-trigger-build-configuration-in-a-subdirectory
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/4a8f5338-1c96-4c00-8857-6705400a464e%40googlegroups.com.

[google-appengine] Re: How GAE services in separate projects communicate through their respective firewall ?

[Zorg]

For precision all our services run nodejs

Le vendredi 29 mai 2020 13:47:14 UTC+2, Zorg a écrit :
>
> We have 2 app engine app (flex and standard) running on separate projects 
> and we want project A to request project B with https to xxx.appspot.com 
> URL.
>
> Our firewall on both projects Denies all IPs(*) and whitelisted App Engine 
> internal addresss (10.1.0.41, 0.1.0.40, 10.0.0.1 and 0.1.0.30) as explained 
> in the doc 
> 
> .
>
> Yet we receive a "403 error forbidden access" (which disappears when 
> disabling the firewall).
>
>
> Is there anything else I can do ?
>
> Thank you in advance.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/498c7343-4503-48d5-8229-b133f55eb0c7%40googlegroups.com.

[google-appengine] Re: How GAE services in separate projects communicate through their respective firewall ?

['Olu' via Google App Engine]

As you may already know, GCP Projects represent a trust boundary within an 
organization. Hence, inter-project communication between App Engine 
services would require Public IP communication or using Shared VPC[1]. 
There should be no internal communication between App Engine Services over 
different projects. Hence, whitelisting App Engine internal IP addresses 
might not be useful in this situation.

About using Public App Engine IP addresses, as illustrated in this document 
[1] App Engine hosts services on a dynamic public IP address of a Google 
load balancer. Due to that, the IP address can be changed any time and any 
Static IP can not be provided.  For outbound services, a large pool of IP 
addresses are used which you can obtain as outlined in this document[2]. 

[1]https://cloud.google.com/vpc/docs/shared-vpc
[2]https://cloud.google.com/appengine/kb/#private-ip 
[3]https://cloud.google.com/appengine/kb/#static-ip 

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/867675e7-bccc-4ceb-9bf4-27135b3afd9a%40googlegroups.com.

[google-appengine] Re: Google Cloud Build - build.yaml & app.yaml in a sub directory not building correct source

['Olu' via Google App Engine]

Hello, Alex

Can you please provide the specific error obtained while using your second 
setup that is failing? This will provide more context. Yes, as indicated in 
this Stackoverflow link[1], it is necessary to specify the DIR in the 
Cloudbuild.yaml whenever you are trying to trigger your build configuration 
in a subdirectory. Additionally, with information available to me, I 
understand you cannot have the app.yaml and the cloudbuild.yaml in the same 
directory if you are deploying in a non-custom runtime 

[1]https://stackoverflow.com/questions/52725046/google-cloud-builder-how-to-trigger-build-configuration-in-a-subdirectory

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/ccc9af20-6c52-49d5-bc95-5d199166385d%40googlegroups.com.

[google-appengine] Re: How to use Cloud Armor with GAE Flex?

['Olu' via Google App Engine]

For any feature or Nice-to-have features that you would like to see 
implemented on the Google Cloud Platform or Google App Engine, you can 
always submit a feature request with detailed information about such 
features on the GCP issues tracking tool[1][2]. This would be evaluated and 
considered, should it fit into the long term plan or road map of the Google 
Cloud Platform.  

Please keep in mind though that feature requests are subject to the 
evaluation of the particular Product team and there are no ETA for the 
implementation of such feature requests.

Particularly about using Cloud Armor with the Google App Engine, there is 
already a feature request open about this request and it is currently being 
evaluated by the App Engine team. I recommend that you bookmark the link to 
receive regular updates about the feature. 

Thank you. 

[1]https://developers.google.com/issue-tracker/#public_users
[2]https://issuetracker.google.com
[3]https://issuetracker.google.com/144150754

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/66cc0a2d-ecf3-414a-9bca-b5d5ff130651%40googlegroups.com.

[google-appengine] Google Cloud Build - build.yaml & app.yaml in a sub directory not building correct source

['Alex Fox' via Google App Engine]

Hey,

I'm having trouble setting up my yaml files for google app engine. The 
configuration works correctly when my app.yaml file is in the root of the 
project but if it is within a subdirectory it does not build the correct 
source. I suspect I need to set the `dir:` option in the build config, but 
I have tried multiple variations and I can't get it to work.

Working file structure, deployed app is ~3mb in size.

```
src
deployment
└── staging
└── build.yaml
app.staging.yaml


# build.yaml
steps:
- name: node:12
  entrypoint: yarn
- name: node:12
  entrypoint: yarn
  args: ['build']
- name: "gcr.io/cloud-builders/gcloud"
  args: ["app", "deploy", "app.staging.yaml"]
timeout: "1800s"
```

Not working file structure, deployed app is ~1kb in size.

```
src
deployment
└── staging
└── build.yaml
└── app.yaml


# build.yaml
steps:
- name: node:12
  entrypoint: yarn
- name: node:12
  entrypoint: yarn
  args: ['build']
- name: "gcr.io/cloud-builders/gcloud"
  args: ["app", "deploy", "deployment/staging/app.yaml"]
timeout: "1800s"
```

In both scenarios I am kicking off the deployment with:
`gcloud builds submit --config deployment/staging/build.yaml`

What should my `dir:` be set to in the build.yaml steps so that the build 
step knows to build from root? Is there any way to debug this locally 
without having to upload the source every time?

Thanks!
A

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/612e4533-0dd8-42fb-91b4-ea9a58b7f563%40googlegroups.com.

[google-appengine] How GAE services in separate projects communicate through their respective firewall ?

[Zorg]

 

We have 2 app engine app (flex and standard) running on separate projects 
and we want project A to request project B with https to xxx.appspot.com 
URL.

Our firewall on both projects Denies all IPs(*) and whitelisted App Engine 
internal addresss (10.1.0.41, 0.1.0.40, 10.0.0.1 and 0.1.0.30) as explained 
in the doc 

.

Yet we receive a "403 error forbidden access" (which disappears when 
disabling the firewall).


Is there anything else I can do ?

Thank you in advance.

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/1b9554dd-09bc-4b4e-ba9a-347deffafaae%40googlegroups.com.

[google-appengine] Problem with Uptime Check alerts - stackdriver

[Sowmiya Ragu]

Hi Team,

Trying to set up Uptime Check alerts for the App Engine services. When I 
deploy the service to App Engine sometime it takes nearly 2 hours of time 
to be available in the Monitoring - Uptime check service list.
Also sometimes , existing services gets vanished from the service list. 

For instance,
Deployed 2 services yesterday api/default to a project.
One service was immediately available in uptime check but not the other'.

Please let us know as why it’s happening.

Regards,
Sowmiya

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/28c76eb0-931a-44ba-a046-4fb5a59edc4bn%40googlegroups.com.

[google-appengine] Re: How to use Cloud Armor with GAE Flex?

[Cihat Kısa]

Thank you for your answer. I use App Engine Firewall, but you can only 
block and allow IP addresses with it. It doesn't have other features like 
blocking or allowing by country code, user agent, and request headers. So 
it's hard to prevent DDOS attacks with only App Engine Firewall since you 
have to know all IP addresses that attackers use. I hope Google will 
provide these features soon.

On Thursday, May 28, 2020 at 6:26:17 AM UTC+3, Mary (Google Cloud Support) 
wrote:
>
> Hello Cihat,
>
> Currently Cloud Armor does not support App Engine Standard or Flex. Both 
> App Engine Standard and App Engine Flexible offer a firewall which may help 
> mitigate DDoS attacks by specifying denial rules to specific or range of 
> IPs.
>
> [1] https://cloud.google.com/appengine/docs/flexible/go/creating-firewalls
>
>
> On Wednesday, May 27, 2020 at 3:00:25 PM UTC-4, Cihat Kısa wrote:
>>
>> Hello,
>>
>> I wonder if is it possible to use Cloud Armor with GAE Flex? Because in 
>> Cloud 
>> Armor's documentation 
>> , it says that you 
>> have to use an HTTPS Load Balancer 
>> . Since GAE Flex 
>> doesn't have a load balancer, how can we use Cloud Armor with GAE Flex? We 
>> have to use a WAF to prevent DDOS attacks. Is it possible to use Cloud 
>> Armor with GAE Flex through HTTPS Load Balancer? If so, can you explain how 
>> can I achieve this goal?
>>
>> Thank you.
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/df59d63e-1e42-47ea-9cfc-7e9fa07ca3b4%40googlegroups.com.