As in Chapter 5 with Cloud Functions, this Cloud Run service is currently using a default service account with broad permissions. Cloud Run is also allowing unauthenticated invocations of the service. This may be OK for testing, but in a production environment, you would want to secure the service, and you will see how to […]
Getting Ready for Deployment – Skill Service with Cloud Run
Before getting hands-on, make sure you have a gcloud CLI either on your local machine or in Cloud Shell, and ensure you are using the same Google Cloud project as in Chapter 5, using the command: gcloudconfiggetproject You can set a PROJECT_ID environment variable again to make it easier to copy and paste commands: exportPROJECT_ID=$(gcloudconfigget-valueproject) […]
Implementation – Skill Service with Cloud Run
The code for this project is in the skill-service directory of the book’s repository. It is implemented in Go. While this may not be a language you have used before, it is worth taking a look at the code to see how it works. The actual code for storing and retrieving the data is in […]
Summary of Services – Skill Service with Cloud Run
Requirements Let’s explore what’s needed for this project. User Story The user story for this piece of functionality is shown in Figure 6-1. Figure 6-1. Project 2 user story Elaborated Requirements This project also has the following specific requirements: Solution What is required here is a reliable and scalable solution for looking up skills from […]
Using a Service Account – Tag Updater with Cloud Functions
By default, the Cloud Function will have used the default service account for the project service-ACCOUNT_ID@PROJECT_ID.iam.gserviceaccount.com. This is not a great idea, as it gives broad access to all resources in the project. You can create a new service account that has the minimum permissions required for the function to work and no more. Specifically, […]
Cloud Native Implementation – Tag Updater with Cloud Functions
Here, you will implement the same functionality as the manual implementation but using a Cloud Function scheduled with Cloud Scheduler. This will allow you to automatically update the tags periodically without any manual intervention. Cloud Functions As mentioned earlier, Cloud Functions can only be written in certain programming languages. The code accompanying this book includes […]
Command Line Implementation – Tag Updater with Cloud Functions
Before getting hands-on, make sure you have a gcloud CLI client either on your local machine or in Cloud Shell and create a new project, as described in Chapter 4; store the PROJECT_ID in an environment variable using: export BigQuery To start with, you can use the bq command-line tool to try out the query […]
Architecture Diagram – Tag Updater with Cloud Functions
Figure 5-2 is a diagram of the architecture you will be implementing. Figure 5-2. Tag updater design You can draw similar diagrams using the Google Cloud architecture diagramming tool, which is a great tool for drawing cloud architectures. Summary of Services Here is a summary of the Google Cloud services you will be using in […]
Requirements – Tag Updater with Cloud Functions
In this initial project, you will write the first part of the Skills Mapper application. You will be introduced to some of the higher-level abstractions in Google Cloud and be shown how you can solve a real-world problem at a minimal cost. You will learn how to solve the requirement in three ways: Note The […]