Skip to content

Commit

Permalink
feat: Initial generation of google-cloud-ids
Browse files Browse the repository at this point in the history
  • Loading branch information
dazuma committed Dec 6, 2021
1 parent 3716b84 commit 6eab975
Show file tree
Hide file tree
Showing 20 changed files with 1,116 additions and 0 deletions.
3 changes: 3 additions & 0 deletions google-cloud-ids/.OwlBot.yaml
@@ -0,0 +1,3 @@
deep-copy-regex:
- source: /google/cloud/ids/[^/]+-ruby/(.*)
dest: /owl-bot-staging/google-cloud-ids/$1
22 changes: 22 additions & 0 deletions google-cloud-ids/.gitignore
@@ -0,0 +1,22 @@
# Ignore bundler lockfiles
Gemfile.lock
gems.locked

# Ignore documentation output
doc/*
.yardoc/*

# Ignore test output
coverage/*

# Ignore build artifacts
pkg/*

# Ignore files commonly present in certain dev environments
.vagrant
.DS_STORE
.idea
*.iml

# Ignore synth output
__pycache__
25 changes: 25 additions & 0 deletions google-cloud-ids/.owlbot-manifest.json
@@ -0,0 +1,25 @@
{
"generated": [
".gitignore",
".repo-metadata.json",
".rubocop.yml",
".yardopts",
".yardopts-cloudrad",
"AUTHENTICATION.md",
"CHANGELOG.md",
"Gemfile",
"LICENSE.md",
"README.md",
"Rakefile",
"google-cloud-ids.gemspec",
"lib/google-cloud-ids.rb",
"lib/google/cloud/ids.rb",
"lib/google/cloud/ids/version.rb",
"test/google/cloud/ids/client_test.rb",
"test/google/cloud/ids/version_test.rb",
"test/helper.rb"
],
"static": [
".OwlBot.yaml"
]
}
15 changes: 15 additions & 0 deletions google-cloud-ids/.repo-metadata.json
@@ -0,0 +1,15 @@
{
"api_id": "ids.googleapis.com",
"client_documentation": "https://googleapis.dev/ruby/google-cloud-ids/latest",
"distribution_name": "google-cloud-ids",
"language": "ruby",
"name": "ids",
"name_pretty": "Cloud IDS API",
"product_documentation": "https://cloud.google.com/intrusion-detection-system/",
"repo": "googleapis/google-cloud-ruby",
"requires_billing": true,
"ruby-cloud-description": "Cloud IDS is an intrusion detection service that provides threat detection for intrusions, malware, spyware, and command-and-control attacks on your network. Cloud IDS works by creating a Google-managed peered network with mirrored VMs. Traffic in the peered network is mirrored, and then inspected by Palo Alto Networks threat protection technologies to provide advanced threat detection. You can mirror all traffic or you can mirror filtered traffic, based on protocol, IP address range, or ingress and egress.",
"ruby-cloud-product-url": "https://cloud.google.com/intrusion-detection-system/",
"ruby-cloud-namespace-override": "Ids=IDS",
"library_type": "GAPIC_AUTO"
}
39 changes: 39 additions & 0 deletions google-cloud-ids/.rubocop.yml
@@ -0,0 +1,39 @@
inherit_gem:
google-style: google-style.yml

AllCops:
Exclude:
- "google-cloud-ids.gemspec"
- "Rakefile"
- "acceptance/**/*"
- "test/**/*"

Bundler/OrderedGems:
Enabled: false
Documentation:
Enabled: false
Layout/LineLength:
Enabled: false
Metrics/BlockLength:
Exclude:
- "samples/**/acceptance/*.rb"
Metrics/AbcSize:
Enabled: false
Metrics/ClassLength:
Enabled: false
Metrics/CyclomaticComplexity:
Enabled: false
Metrics/MethodLength:
Enabled: false
Metrics/ModuleLength:
Enabled: false
Metrics/PerceivedComplexity:
Enabled: false

Naming/FileName:
Exclude:
- "lib/google-cloud-ids.rb"

Style/BlockDelimiters:
Exclude:
- "samples/**/acceptance/*.rb"
11 changes: 11 additions & 0 deletions google-cloud-ids/.yardopts
@@ -0,0 +1,11 @@
--no-private
--title=Cloud IDS API
--exclude _pb\.rb$
--markup markdown
--markup-provider redcarpet

./lib/**/*.rb
-
README.md
AUTHENTICATION.md
LICENSE.md
11 changes: 11 additions & 0 deletions google-cloud-ids/.yardopts-cloudrad
@@ -0,0 +1,11 @@
--no-private
--title=Cloud IDS API
--exclude _pb\.rb$
--format yaml
--template-path ../template

./lib/**/*.rb
-
README.md
AUTHENTICATION.md
LICENSE.md
167 changes: 167 additions & 0 deletions google-cloud-ids/AUTHENTICATION.md
@@ -0,0 +1,167 @@
# Authentication

In general, the google-cloud-ids library uses
[Service Account](https://cloud.google.com/iam/docs/creating-managing-service-accounts)
credentials to connect to Google Cloud services. When running within
[Google Cloud Platform environments](#google-cloud-platform-environments) the
credentials will be discovered automatically. When running on other
environments, the Service Account credentials can be specified by providing the
path to the
[JSON keyfile](https://cloud.google.com/iam/docs/managing-service-account-keys)
for the account (or the JSON itself) in
[environment variables](#environment-variables). Additionally, Cloud SDK
credentials can also be discovered automatically, but this is only recommended
during development.

## Quickstart

1. [Create a service account and credentials](#creating-a-service-account).
2. Set the [environment variable](#environment-variables).

```sh
export GOOGLE_CLOUD_CREDENTIALS=path/to/keyfile.json
```

3. Initialize the client.

```ruby
require "google/cloud/ids"

client = Google::Cloud::IDS.ids
```

## Credential Lookup

The google-cloud-ids library aims to make authentication
as simple as possible, and provides several mechanisms to configure your system
without requiring **Service Account Credentials** directly in code.

**Credentials** are discovered in the following order:

1. Specify credentials in method arguments
2. Specify credentials in configuration
3. Discover credentials path in environment variables
4. Discover credentials JSON in environment variables
5. Discover credentials file in the Cloud SDK's path
6. Discover GCP credentials

### Google Cloud Platform environments

When running on Google Cloud Platform (GCP), including Google Compute Engine
(GCE), Google Kubernetes Engine (GKE), Google App Engine (GAE), Google Cloud
Functions (GCF) and Cloud Run, **Credentials** are discovered automatically.
Code should be written as if already authenticated.

### Environment Variables

The **Credentials JSON** can be placed in environment variables instead of
declaring them directly in code. Each service has its own environment variable,
allowing for different service accounts to be used for different services. (See
the READMEs for the individual service gems for details.) The path to the
**Credentials JSON** file can be stored in the environment variable, or the
**Credentials JSON** itself can be stored for environments such as Docker
containers where writing files is difficult or not encouraged.

The environment variables that google-cloud-ids
checks for credentials are configured on the service Credentials class (such as
`::Google::Cloud::IDS::V1::IDS::Credentials`):

* `GOOGLE_CLOUD_CREDENTIALS` - Path to JSON file, or JSON contents
* `GOOGLE_CLOUD_KEYFILE` - Path to JSON file, or JSON contents
* `GOOGLE_APPLICATION_CREDENTIALS` - Path to JSON file

```ruby
require "google/cloud/ids"

ENV["GOOGLE_CLOUD_CREDENTIALS"] = "path/to/keyfile.json"

client = Google::Cloud::IDS.ids
```

### Configuration

The path to the **Credentials JSON** file can be configured instead of storing
it in an environment variable. Either on an individual client initialization:

```ruby
require "google/cloud/ids"

client = Google::Cloud::IDS.ids do |config|
config.credentials = "path/to/keyfile.json"
end
```

Or globally for all clients:

```ruby
require "google/cloud/ids"

Google::Cloud::IDS.configure do |config|
config.credentials = "path/to/keyfile.json"
end

client = Google::Cloud::IDS.ids
```

### Cloud SDK

This option allows for an easy way to authenticate during development. If
credentials are not provided in code or in environment variables, then Cloud SDK
credentials are discovered.

To configure your system for this, simply:

1. [Download and install the Cloud SDK](https://cloud.google.com/sdk)
2. Authenticate using OAuth 2.0 `$ gcloud auth login`
3. Write code as if already authenticated.

**NOTE:** This is _not_ recommended for running in production. The Cloud SDK
*should* only be used during development.

[gce-how-to]: https://cloud.google.com/compute/docs/authentication#using
[dev-console]: https://console.cloud.google.com/project

[enable-apis]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/enable-apis.png

[create-new-service-account]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/create-new-service-account.png
[create-new-service-account-existing-keys]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/create-new-service-account-existing-keys.png
[reuse-service-account]: https://raw.githubusercontent.com/GoogleCloudPlatform/gcloud-common/master/authentication/reuse-service-account.png

## Creating a Service Account

Google Cloud requires **Service Account Credentials** to
connect to the APIs. You will use the **JSON key file** to
connect to most services with google-cloud-ids.

If you are not running this client within
[Google Cloud Platform environments](#google-cloud-platform-environments), you
need a Google Developers service account.

1. Visit the [Google Developers Console][dev-console].
2. Create a new project or click on an existing project.
3. Activate the slide-out navigation tray and select **API Manager**. From
here, you will enable the APIs that your application requires.

![Enable the APIs that your application requires][enable-apis]

*Note: You may need to enable billing in order to use these services.*

4. Select **Credentials** from the side navigation.

You should see a screen like one of the following.

![Create a new service account][create-new-service-account]

![Create a new service account With Existing Keys][create-new-service-account-existing-keys]

Find the "Add credentials" drop down and select "Service account" to be
guided through downloading a new JSON key file.

If you want to re-use an existing service account, you can easily generate a
new key file. Just select the account you wish to re-use, and click "Generate
new JSON key":

![Re-use an existing service account][reuse-service-account]

The key file you download will be used by this library to authenticate API
requests and should be stored in a secure location.
2 changes: 2 additions & 0 deletions google-cloud-ids/CHANGELOG.md
@@ -0,0 +1,2 @@
# Release History

5 changes: 5 additions & 0 deletions google-cloud-ids/Gemfile
@@ -0,0 +1,5 @@
source "https://rubygems.org"

gemspec

gem "google-cloud-ids-v1", path: "../google-cloud-ids-v1"

0 comments on commit 6eab975

Please sign in to comment.