INSTALLATION.md

Installation

Create/use a Google Cloud Project(GCP) with a billing account

• How to Creating and Managing Projects
• How to Create, Modify, or Close Your Billing Account

Check the permissions

Make sure your have Admin role in GMC.

Make sure the user running the installation is an Owner in GCP project.

Clone repository

• Go to https://professional-services.googlesource.com/new-password and copy code
• Execute the code in Cloud Shell
• git clone https://github.com/google/product-dsa.git

If you want to get a non-default branch (for example with a dev or old versions) then:

• git clone -b v2 https://github.com/google/product-dsa.git

Prepare parameters

• Google Merchant Center Id You can use either MCA (root account) or child accounts.

Install GAE application

Go into a folder with cloned repository and run: install.sh

Troubleshooting

• (gcloud.app.deploy) NOT_FOUND: Unable to retrieve P4SA: [service-NUMBER@gcp-gae-service.iam.gserviceaccount.com] from GAIA. Could be GAIA propagation delay or request from deleted apps. Execute: gcloud app deploy

• "create-oauth-client": ERROR: (gcloud.alpha.iap.oauth-brands.list) INVALID_ARGUMENT: Request contains an invalid argument. Reason: your GCP project is outside of a Cloud Organization. Workaround: You need to create an OAuth consent screent manually and re-enable IAP for the AppEngine app.

Grant GAE SA permissions in GMC

Grant user ${PROJECT_ID}@appspot.gserviceaccount.com Standard acceess permissions in GMC.

Grant other users access

To grant access permissions for additional users one should go to https://console.cloud.google.com/security/iap and create principals with "IAP-secured Web App User" role. If you use Google Workspace then it can make sense to add the whole domain as IAP principal.

Setup

Open the app (http://${PROJECT_ID}.ew.r.appspot.com) and follow the setup wizard.