Add DNS entry for edu.chainguard.dev pointing at App Engine

[jamonation]

We'd like to get DNS set up ahead of the site launch and will need a bit of help @afeddersen. The Chainguard Academy site is hosted on App Engine at https://chainguard-academy.uc.r.appspot.com with IAP restricting access to chainguard.dev project members until launch.

The process to add a custom domain to App Engine is a little involved, requiring validation with a TXT record, and then adding a CNAME to point at App Engine itself.

Here's what Google shows when I start the process:

Once that TXT record is verified, I think the CNAME to point edu.chainguard.dev at is ghs.googlehosted.com. From there I'm fairly sure I can finish the rest in App Engine, e.g. TLS cert.

[afeddersen]

Hey Jamon -- I set this up recently for my wife. Are you using Google AppEngine Standard?

I can't remember the exact order, and I'm not sure it matters, but I think I added the custom domain first.

Then I updated the DNS in my Google Domains account.

[jamonation]

Odd @afeddersen, I wonder if that pristinehiring.com domain being registered with Google Domains and associated with your account marks it as validated automatically?

The only thing I can do in the UI is what's in my screenshots :(

[afeddersen]

I'm an organization admin which means I don't have owner permissions on your project by default but I can give myself access. When I first visited this page I could not add a custom domain -> https://console.cloud.google.com/appengine/settings/domains?project=chainguard-academy

I went to the IAM console and granted myself AppEngine Admin, and then it worked. I see you're an owner which seems like that would be enough but I also added AppEngine Admin to your principal. Can you visit that link and see if it's possible now? If it's not please ping me whenever and we'll jump on a call together to get it done. :)

[jamonation]

@mattmoor - Anthony and I have both tried to create a custom domainin App Engine so that I can point edu.chainguard.dev at the Academy site. It sounds like we'll need some help from you to verify the domain. When you've got a moment could you take a look at adding it here? https://console.cloud.google.com/appengine/settings/domains?project=chainguard-academy

[mattmoor]

@jamonation Do you wanna grab some time with me tomorrow and we can knock this out? Would like a second set of eyes here.

[jamonation]

@mattmoor sounds good, I put a time on your calendar for later today, let me know if we need to reschedule.

[jamonation]

Thanks for the help all, we got this configured today, TLS and all. The App Engine infrastructure is ready to turn off IAP when we soft-launch.