go.chromium.org/luci@v0.0.0-20240309015107-7cdc2e660f33/buildbucket/appengine/frontend/service-default-go.yaml (about)

     1  service: default-go
     2  runtime: go121
     3  
     4  # Note: this is interpreted by gae.py, it maps the app ID being deployed to
     5  # values of ${...} vars.
     6  luci_gae_vars:
     7    cr-buildbucket-dev:
     8      AUTH_SERVICE_HOST: chrome-infra-auth-dev.appspot.com
     9      PROFILING_PROBABILITY: "1.0"
    10      REDIS_ADDR: 10.90.74.59:6379
    11      VPC_CONNECTOR: projects/cr-buildbucket-dev/locations/us-central1/connectors/connector
    12      DS_CACHE: redis
    13      CONFIG_SERVICE_HOST: config.luci.app
    14      OAUTH_CLIENT_ID: 1037694916935-kf96dqdbptp98pahigutgighdft4s9s9.apps.googleusercontent.com
    15      OAUTH_CLIENT_SECRET: sm://oauth-client-secret
    16      OAUTH_REDIRECT_URL: https://cr-buildbucket-dev.appspot.com/auth/openid/callback
    17    cr-buildbucket:
    18      AUTH_SERVICE_HOST: chrome-infra-auth.appspot.com
    19      PROFILING_PROBABILITY: "0.02"
    20      REDIS_ADDR: 10.52.56.84:6379
    21      VPC_CONNECTOR: projects/cr-buildbucket/locations/us-central1/connectors/connector-e2-standard-4
    22      DS_CACHE: redis
    23      CONFIG_SERVICE_HOST: config.luci.app
    24      OAUTH_CLIENT_ID: 174799409470-0041crblugt4hrqsdrjatu869a41jdbq.apps.googleusercontent.com
    25      OAUTH_CLIENT_SECRET: sm://oauth-client-secret
    26      OAUTH_REDIRECT_URL: https://cr-buildbucket.appspot.com/auth/openid/callback
    27  
    28  vpc_access_connector:
    29    name: ${VPC_CONNECTOR}
    30  
    31  automatic_scaling:
    32    min_idle_instances: 1
    33    max_concurrent_requests: 80
    34  
    35  inbound_services:
    36  - warmup
    37  
    38  instance_class: F4
    39  
    40  entrypoint: >
    41    main
    42    -auth-service-host ${AUTH_SERVICE_HOST}
    43    -bqlog-dataset sandbox
    44    -ts-mon-account app-engine-metric-publishers@prodx-mon-chrome-infra.google.com.iam.gserviceaccount.com
    45    -cloud-error-reporting
    46    -profiling-probability ${PROFILING_PROBABILITY}
    47    -config-service-host ${CONFIG_SERVICE_HOST}
    48    -gerrit-auth-signer-account gerritcodereview@system.gserviceaccount.com
    49    -gerrit-auth-signer-account git-gerrit@system.gserviceaccount.com
    50    -gerrit-auth-audience https://api.cr.dev
    51    -root-secret sm://root-secret
    52    -primary-tink-aead-key sm://tink-aead-primary
    53    -ds-connection-pool-size 8
    54    -redis-addr ${REDIS_ADDR}
    55    -ds-cache ${DS_CACHE}
    56    -encrypted-cookies-client-id ${OAUTH_CLIENT_ID}
    57    -encrypted-cookies-client-secret ${OAUTH_CLIENT_SECRET}
    58    -encrypted-cookies-redirect-url ${OAUTH_REDIRECT_URL}
    59  
    60  handlers:
    61  - url: /.*
    62    script: auto
    63    secure: always