go.chromium.org/luci@v0.0.0-20240309015107-7cdc2e660f33/auth_service/services/frontend/service-defaultv2.yaml (about)

     1  runtime: go121
     2  service: defaultv2
     3  app_engine_apis: true
     4  
     5  # luci_gae_vars is interpreted by gae.py, for apps deployed manually.
     6  # It maps the app ID being deployed to values of vars used below.
     7  luci_gae_vars:
     8    chrome-infra-auth-dev:
     9      OAUTH_CLIENT_ID: 502071599212-d623foidam4v1pgcjqeala1puafovh1c.apps.googleusercontent.com
    10      OAUTH_CLIENT_SECRET: sm://oauth-client-secret
    11      OAUTH_REDIRECT_URL: https://defaultv2-dot-chrome-infra-auth-dev.appspot.com/auth/openid/callback
    12      ROOT_SECRET: sm://root-secret
    13      TINK_AEAD_KEY: sm://tink-aead-primary
    14      TS_MON_ACCOUNT: app-engine-metric-publishers@prodx-mon-chrome-infra.google.com.iam.gserviceaccount.com
    15      CONFIG_SERVICE_HOST: config.luci.app
    16  
    17  # Environment variables while transitioning from
    18  # Auth Service v1 (Python) to Auth Service v2 (Go).
    19  env_variables:
    20    DRY_RUN_API_CHANGES: true
    21    DRY_RUN_CRON_CONFIG: true
    22    DRY_RUN_CRON_REALMS: true
    23    DRY_RUN_CRON_STALE_AUTH: true
    24    DRY_RUN_TQ_CHANGELOG: true
    25    DRY_RUN_TQ_REPLICATION: true
    26    ENABLE_GROUP_IMPORTS: false
    27  
    28  inbound_services:
    29  - warmup
    30  
    31  handlers:
    32  - url: /static
    33    static_dir: static
    34    secure: always
    35  - url: /.*
    36    script: auto
    37    secure: always
    38  
    39  entrypoint: >
    40    main
    41    -cloud-error-reporting
    42    -encrypted-cookies-client-id ${OAUTH_CLIENT_ID}
    43    -encrypted-cookies-client-secret ${OAUTH_CLIENT_SECRET}
    44    -encrypted-cookies-redirect-url ${OAUTH_REDIRECT_URL}
    45    -encrypted-cookies-tink-aead-key ${TINK_AEAD_KEY}
    46    -frontend-client-id ${OAUTH_CLIENT_ID}
    47    -root-secret ${ROOT_SECRET}
    48    -ts-mon-account ${TS_MON_ACCOUNT}
    49    -config-service-host ${CONFIG_SERVICE_HOST}