kkom / gdrive-backup Goto Github PK

View Code? Open in Web Editor NEW

0.0 0.0 0.0 37 KB

Makefile 9.20% HCL 72.33% Dockerfile 7.81% Shell 6.75% Smarty 1.92% Python 2.00%

gdrive-backup's People

Contributors

Watchers

gdrive-backup's Issues

Figure out why OIDC authentication failed on first invocation of Cloud Run

2019-09-29 17:37:51.095 CESTGET4030 B0 msGoogle-Cloud-Scheduler https://gdrive-backup-a43abwwixq-ew.a.run.app/gdrive-backup
The request was not authenticated. Either allow unauthenticated invocations or set the proper Authorization header. Read more at https://cloud.google.com/run/docs/securing/authenticating

Maybe should do OAuth instead? Couldn't figure out how to set up OAuth in Terraform on first try:

gdrive-backup/main.tf

Lines 229 to 231 in d5229fc

 oidc_token { 

 service_account_email = google_service_account.cloud_run_invoker.email 

 }

Consider only storing encrypted service account key

It seems unsafe to save the plaintext service account key everywhere...

Need to read up if it’s safe or not, and if not — encrypt it and lock down access

Host the docker container on cloud run

Failed to copy: googleapi: Error 400: Cannot use ACL API to set object policy when object policies are disabled.

related to: rclone/rclone#3014

Regularly invoke the cloud run, to perform backups

Fix possible race condition in datetime printing

It's very unlikely, but the date can change before printing the hour and minute:

gdrive-backup/docker_image/gdrive-backup.bash

Line 13 in bbed600

gcs:$STORAGE_BUCKET_NAME/backup_$(date +%Y%m%d)_$(date +%H%M)

Push the docker image to container registry

Ideally as a part of terraform apply (maybe using local-exec, unless there is a better option)

kkom / gdrive-backup Goto Github PK

gdrive-backup's People

Contributors

Watchers

gdrive-backup's Issues

Figure out why OIDC authentication failed on first invocation of Cloud Run

Consider only storing encrypted service account key

Host the docker container on cloud run

Failed to copy: googleapi: Error 400: Cannot use ACL API to set object policy when object policies are disabled.

Regularly invoke the cloud run, to perform backups

Fix possible race condition in datetime printing

Push the docker image to container registry

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent

Jobs

	oidc_token {
	service_account_email = google_service_account.cloud_run_invoker.email
	}