Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduce Google Cloud Run deployment example #292

Merged
merged 33 commits into from
May 9, 2024

Conversation

ag-adampike
Copy link
Member

@ag-adampike ag-adampike commented Mar 1, 2024

This PR is to establish a new Cloud Run deployment example for SCIM Bridge, including:

  • Cloud Run service YAML
  • README with steps to deploy SCIM Bridge using Cloud Shell
  • subfolder with README and config for connecting to Google Workspace

For review:

ag-adampike and others added 11 commits April 25, 2024 12:04
Signed-off-by: Adam Pike <adam.pike@1password.com>
Signed-off-by: Adam Pike <adam.pike@1password.com>
- must be quoted

Signed-off-by: Adam Pike <adam.pike@1password.com>
Signed-off-by: Adam Pike <adam.pike@1password.com>
- don't scale to 0
- faster boot time

Signed-off-by: Adam Pike <adam.pike@1password.com>
- must total 1 vCPU

Signed-off-by: Adam Pike <adam.pike@1password.com>
Signed-off-by: Adam Pike <adam.pike@1password.com>
Signed-off-by: Adam Pike <adam.pike@1password.com>
- shorter name
- add subfolder and YAML spec for connecting to Google Workspace

Signed-off-by: Adam Pike <adam.pike@1password.com>
- most ToC entries are missing
- GW section is missing some steps
- needs appendices to cover updates, scaling, cred rotation, etc.

Signed-off-by: Adam Pike <adam.pike@1password.com>
@ag-adampike ag-adampike force-pushed the solutions/pike/google-cloud-run branch from abc8076 to a4b4c19 Compare April 25, 2024 14:35
Signed-off-by: Adam Pike <adam.pike@1password.com>
- fix alert rendering

Signed-off-by: Adam Pike <adam.pike@1password.com>
- remove indents for quote blocks used for alerts to enable rich rendering

Signed-off-by: Adam Pike <adam.pike@1password.com>
Copy link
Collaborator

@black-bryan black-bryan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Love the improvements. There a few small typos or sections we overlooked.

beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
@ag-adampike
Copy link
Member Author

Thanks for the look! I've got some local work that is almost ready to commit that resolves a bit of this already. 🙂

ag-adampike and others added 8 commits May 2, 2024 09:26
- completed steps to enable Workspace
- incorporated review suggestions
- typos/corrections

Signed-off-by: Adam Pike <adam.pike@1password.com>
Co-Authored-By: Bryan Black <bryan.black@agilebits.com>
Signed-off-by: Adam Pike <adam.pike@1password.com>
- add README.md to google-workspace subdir
- remove GW instructions from main README
- add callout to link out to GW instructions in new README

Co-Authored-By: Bryan Black <bryan.black@agilebits.com>
- shorter, better tooltip for GW steps
- migrated info from tooltip to GW README

Signed-off-by: Adam Pike <adam.pike@1password.com>
- functions corretly either way
- aligned with indent structure for lists elsewhere in this file and repo

Signed-off-by: Adam Pike <adam.pike@1password.com>
- fix broken relative links introduced in last commit
- punctuation

Signed-off-by: Adam Pike <adam.pike@1password.com>
- ToC
- prereq steps

Signed-off-by: Adam Pike <adam.pike@1password.com>
@ag-adampike ag-adampike marked this pull request as ready for review May 2, 2024 23:42
@ag-adampike ag-adampike requested a review from a team May 2, 2024 23:42
@ag-adampike ag-adampike added the enhancement New feature or request label May 2, 2024
Copy link
Collaborator

@black-bryan black-bryan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have not run through this yet from a validation standpoint with the updated GW steps. I will try and take it for a run soon.

A few small suggestions.

beta/google-cloud-run/README.md Show resolved Hide resolved
beta/google-cloud-run/README.md Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Show resolved Hide resolved
Copy link
Member Author

@ag-adampike ag-adampike left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the review! I'll address some of these in a future commit. Some comments with suggestions on how to do some of those suggestions. ;-)

beta/google-cloud-run/README.md Show resolved Hide resolved
beta/google-cloud-run/README.md Outdated Show resolved Hide resolved
beta/google-cloud-run/README.md Show resolved Hide resolved
ag-adampike and others added 3 commits May 3, 2024 11:44
- added updated instructions
- style (case)

Co-authored-by: Bryan Black <bryan.black@agilebits.com>
Signed-off-by: Adam Pike <adam.pike@1password.com>
Co-Authored-By: Bryan Black <bryan.black@agilebits.com>
@ag-adampike ag-adampike force-pushed the solutions/pike/google-cloud-run branch from c6f25e0 to 39694ef Compare May 3, 2024 18:50
ag-adampike and others added 4 commits May 8, 2024 10:48
Signed-off-by: Adam Pike <adam.pike@1password.com>
Signed-off-by: Adam Pike <adam.pike@1password.com>
Signed-off-by: Adam Pike <adam.pike@1password.com>
black-bryan
black-bryan previously approved these changes May 8, 2024
Copy link
Collaborator

@black-bryan black-bryan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All looks good. We just need to apply the URL todo changes to ensure that the paths match up as part of the merge

@ag-adampike
Copy link
Member Author

All links should be pointing the their new home on main once this is merged. :-)

- fixed some broken links
- corrected typos
- slightly shorter code block for secret access command
- clearer update steps
- DRY-er post-update testing
- better callouts

Signed-off-by: Adam Pike <adam.pike@1password.com>
Signed-off-by: Adam Pike <adam.pike@1password.com>
Signed-off-by: Adam Pike <adam.pike@1password.com>
@ag-adampike ag-adampike requested review from a team and black-bryan May 8, 2024 22:44
Copy link
Collaborator

@black-bryan black-bryan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One small suggestion about how we handle calling the project name in the long command.

```sh
gcloud secrets add-iam-policy-binding scimsession --member=serviceAccount:$(
gcloud iam service-accounts list --filter="$(
gcloud projects describe op-scim-bridge --format="value(projectNumber)"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We might want to add a tip here, stating that if they used a custom project name to edit this command.

As an alternative to a tip, we could set a opProject variable as part of the command used in step 1.2 and the tip in step 1.2 for customers who already created a project. This way we could simply use that within this long command to remove any confusion.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great point, and I think we can likely improve the flow a bit in that earlier step and perhaps replace this entire line in this block with that variable.

Let's merge this as is and then I'll note it in a new issue.

@ag-adampike ag-adampike merged commit 1cf870e into main May 9, 2024
@ag-adampike ag-adampike deleted the solutions/pike/google-cloud-run branch May 9, 2024 20:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants