[google-appengine] Re: Practical difference from Cloud Run

['Nicolas (Google Cloud Platform Support)' via Google App Engine]

Hi Gabriel,

Thanks for bringing those questions to our attention, I will forward them 
to the documentation team. For the time being I've found a community FAQ 
 that 
could answer some of your questions. Please note that this is not the 
official Google Cloud documentation.

Have a great day!

On Wednesday, April 10, 2019 at 5:23:50 PM UTC-4, Gabriel Axel wrote:
>
> Greetings. I watched the videos and read the docs of the new Cloud Run 
> service and also took a look at the comparison table between GAE and Cloud 
> Run, and to my understanding Cloud Run covers everything GAE Standard and 
> Flexible do without any of their limitations. Maybe the only thing GAE "has 
> over" Cloud Run is not having to write Dockerfile (except for Flexible 
> custom runtime). Did I miss anything? Once Cloud Run goes GA, what use 
> cases would be preferable for GAE over it?
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/bfcff5b7-9d97-4e1f-a0b9-54de8ff58c96%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[google-appengine] Re: Creating a HIPPA Compliant GSuite Accessible Only App-- Billing, HIPAA, & Access Questions

[Khaled Wagdy]

Hi Anna,

That's quite interesting! On the bright side, congrats on making an app 
that eventually became the focus of the company, good job on that!

I have some experience with G Suite and with Google App Engine development 
using Python. I have mainly used Google Datastore (*which should soon be 
automatically migrated to Firebase in Datastore mode*). Let me try to 
address some of the points you mentioned..

   1. What do I need to know about transferring the app to the admin owner 
   once the project is completed? They have added me to their suite, but I 
   will be removed once I am done with the project
   I would rather have them create a project admin generic account rather 
   than an individual account, and use that to create the project. This way 
   they can use the same account after you are done, they would just need to 
   reset its password. Or if you want to keep the current setup, you can 
transfer 
   project ownership to another account 
   

 after 
   you are done. Another option is also to add another user as "owner" to the 
   project from *IAM here ,* 
   more about roles here 
   *https://cloud.google.com/iam/docs/understanding-roles* 
   
   2. When I go into my project console under the cloud SQL it says, "You 
   do not have the required permissions to create a Cloud SQL instance. 
   Contact a project administrator to change these settings." I am the project 
   admin so I am assuming this has to do with the little prompt at the 
   top that is telling me to set up billing..
   You are probably right, as you are creating an instance that is billed, 
   you probably need to enable and setup billing first
   3. Should I be inputting my own billing information? Or should I have 
   the organization do it? And if the latter, how do I have them do that?
   No! Please do not do that, you are right about your concerns being 
   billed from your credit card and that later it may not be sufficient for an 
   entire organization consumption of the app. Aside to that you probably 
   don't need the headache of being billed then trying to invoice the 
   organization for the paid bills! You ask them politely to add their credit 
   card information in the project billing section 
   https://console.cloud.google.com/billing/ (*you may need to choose the 
   project*). Again I would setup another owner account for the 
   organization to be able to manage all that stuff.
   4. Has anyone developed a HIPAA compliant app? If so, I would really 
   appreciate any guidance you could offer me. 
   I haven't really, but I see this documentation here 
   *https://cloud.google.com/security/compliance/hipaa/* 
    which has 
   "Recommended technical best practices" section that may be worth going 
   through as a checklist
   5. creating a GSuite accessible only app.. I have only ever made public 
   apps so I am not sure how to configure settings so that nobody can find the 
   app unless they are a member of the suite.
   I am not sure how you are currently managing authentication in your app, 
   but I believe G suite authentication for a specific domain is done from *App 
   Engine settings ,* 
   check *this stack overflow question* 
   

 
   too
   6. I tried deploying my first firebase version of the app on Google App 
   engine and it worked fine.. but I wasn't able to figure out how to edit my 
   source code once it was deployed.. I ended up just deleting the projects 
   and creating new ones every time I went to test a different version. I know 
   that's probably the absolute wrong thing to do, but I am really new to 
   Google App engine
   No no no! You don't edit your code on GCP, you edit locally and then 
   deploy. When you deploy to app engine you have full control! you can simply 
   deploy using a *gcloud* command from the terminal Every time you deploy 
   your code, a new version is created on the GCP project and traffic is 
   migrated to this new version. You can even access old versions, or have two 
   or more versions alive at the same time and you can choose to split traffic 
   between those two or more versions! See... *Deploying to App Engine* 
   
, 
   *Splitting traffic* 
   
   ,

I hope this helps you a bit, all the best,
Khaled

On Thursday, April 11, 2019 at 10:32:37 PM UTC+2, Anna Nevison wrote:
>
> Hi everyone, 
>
> Thanks to some friendly individuals on the App Maker forum.. I believe I 
> have 

[google-appengine] Creating a HIPPA Compliant GSuite Accessible Only App-- Billing, HIPAA, & Access Questions

[Anna Nevison]

Hi everyone, 

Thanks to some friendly individuals on the App Maker forum.. I believe I 
have found the right place to post this now lol.


A bit of background, I created an app for an organization that I initially 
thought would only run locally and I used the firebase api to input 
information from it into a database. The organization now wants me to move 
the app to Google Cloud so members of their G Suite can use it and they 
need the database changed to a SQL one so it can be HIPAA compliant (I did 
not realize the app would be storing what was considered sensitive patient 
info when I first coded it and Firebase is not HIPAA compliant)

I am a bit over my head here because I have never created a HIPAA compliant 
Google App that would be, theoretically, only accessible by members of the 
organization's GSuite... and I am finding that the documentation on how to 
do so is super confusing..  So I have a few questions that I would be 
really grateful if any developer who has been hired in as a temporary 
contractor for an org to create a Google App could answer... or anyone who 
has developed a Google App that was HIPAA compliant.. or anyone who has 
developed an app that was only accessible to members of a GSuite..  

For those who have developed apps for organizations as temporary 
contractors.. What do I need to know about transferring the app to the 
admin owner once the project is completed? They have added me to their 
suite, but I will be removed once I am done with the project.. Is it easy 
to transfer the admin rights of an app so I can be off boarded from the 
suite and they can still have the app running? Additionally, regarding 
setting up billing, I am wondering what is the best way to set up the app's 
cloud SQL instance in the Google App engine. After reading the docs about 
this, I had the admin for the organization set up a default Cloud SQL 
instance. However, when I go into my project console under the cloud SQL it 
says, "You do not have the required permissions to create a Cloud SQL 
instance. Contact a project administrator to change these settings." I am 
the project admin so I am assuming this has to do with the little prompt at 
the top that is telling me to set up billing... Should I be inputting my 
own billing information? Or should I have the organization do it? And if 
the latter, how do I have them do that? I know I receive a $300 credit so I 
am not worried about being billed.. but they are going to eventually have 
to pay for the database (and they are willing to do so) because it will be 
making quite a few calls so that credit may not last long.. 

Okay, this one is the one I am most worried about.. HIPAA compliance... I 
am not even sure how to start tackling that.. I have done quite a bit of 
research on it and I still do not have clear understanding of what needs to 
be there and how exactly I should put it there.. Has anyone developed a 
HIPAA compliant app? If so, I would really appreciate any guidance you 
could offer me. 

Next is creating a GSuite accessible only app.. I have only ever made 
public apps so I am not sure how to configure settings so that nobody can 
find the app unless they are a member of the suite. 

Lastly, is there a way for me to deploy my app locally with the cloud SQL 
database after it is set up so I can test to see if it is working? I tried 
deploying my first firebase version of the app on Google App engine and it 
worked fine.. but I wasn't able to figure out how to edit my source code 
once it was deployed.. I ended up just deleting the projects and creating 
new ones every time I went to test a different version. I know that's 
probably the absolute wrong thing to do, but I am really new to Google App 
engine.. I created a local posegres SQL database just so I could start 
adjusting the syntax that I had for the firebase portion of the code.. but 
it would be nice if I could test it on the actual database that the app 
will call to. 

Thank you so much in advance for any help you guys can offer me! 

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/a68177b6-3476-462a-9e11-7884e444e263%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[google-appengine] Re: How do I get a Python37 app working?

[Khaled Wagdy]

Hello,

I am wondering why you are using *gunicorn* command and not just *python 
main.app*? What web framework are you using?

On Monday, April 8, 2019 at 8:21:50 PM UTC+2, Mark Summerfield wrote:
>
> I've change the `app.yaml` file to match the docs:
> ```
> runtime: python37
>
> handlers:
> - url: /static
>   static_dir: static
>
> - url: /.*
>   script: auto
> ```
> But I now realise that when I try to test the app, I don't use the yaml 
> file at all because this is my command line for local testing:
> `gunicorn -b localhost:8080 --reload --log-level debug main:app`
> So that only knows about main.py; it doesn't know anything about the yaml 
> file. 
>
> So, how do I do _local_ testing using the yaml file to serve up the static 
> files and relying on main.py for the dynamic pages?
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/3d198b3d-2935-49d7-8131-ff2f5f186c9d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [google-appengine] Re: What does X-Google-Apps-Metadata: domain=gmail mean?

['Nicolas (Google Cloud Platform Support)' via Google App Engine]

Hi Joshua,

I couldn't find any documentation supporting this, but I think you are 
rightand those headers are used by Google App Engine by default. 


On Wednesday, April 10, 2019 at 4:14:34 AM UTC-4, Joshua Fox wrote:
>
> I do not use Namespace API, Users API, or Google-provided Authentication. 
>
> So if I understand correctly, GAE adds these  headers "just in case", but 
> they are irrelevant to me.
>
> On Tue, Apr 9, 2019 at 8:35 PM ykarout via Google App Engine <
> google-appengine@googlegroups.com> wrote:
>
>> Hello Joshua,
>>
>> From doing some internal research:
>>
>> 1- X-AppEngine-Default-Namespace is the default namespace used by the 
>> Namespace 
>> API . 
>> It is only used for domain-restricted authentication. If your app is 
>> available to all gmail.com users, then it should be gmail.com unless a 
>> custom domain is specified.
>>
>> 2- X-Google-Apps-Metadata is used by the Users API 
>> 
>>  
>> to specify a Google Apps domain. For normal Google login, it is set to 
>> gmail.com.
>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Google App Engine" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to google-appengine+unsubscr...@googlegroups.com.
>> To post to this group, send email to google-appengine@googlegroups.com.
>> Visit this group at https://groups.google.com/group/google-appengine.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/google-appengine/91d74baf-215d-4b89-a987-7b7dbb3bc80e%40googlegroups.com
>>  
>> 
>> .
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
> -- 
>  
>
> *JOSHUA FOX*
> Director, Software Architecture | Freightos
>
>
>
> *T (Israel): *+972-545691165 | *T (US)*:  +1-3123400953  
> Smooth shipping.
>
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/0f0e0c9e-ecdb-4953-880c-61e97ca64c09%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [google-appengine] Practical difference from Cloud Run

[Michael Liu]

Also interested in what networking differences there are. For example, can 
cloud run services reach compute instances on the same default project 
network?

We use cloud tasks to distribute/connect a lot of pipelines, doesn't seem 
to be listed as compatible w/ normal cloud run. (assuming everything is 
reachable via gke flavor)
https://cloud.google.com/run/docs/using-gcp-services

On Wednesday, April 10, 2019 at 11:35:20 PM UTC-7, Gabriel Axel wrote:
>
> This is the comparison table between the different container running 
> options: https://cloud.google.com/container-options/
>
> On Thursday, April 11, 2019 at 4:26:55 AM UTC+3, Nicolas Grilly wrote:
>>
>> On Wed, Apr 10, 2019 at 11:23 PM Gabriel Axel  wrote:
>>
>>> I watched the videos and read the docs of the new Cloud Run service and 
>>> also took a look at the comparison table between GAE and Cloud Run, and to 
>>> my understanding Cloud Run covers everything GAE Standard and Flexible do 
>>> without any of their limitations. Maybe the only thing GAE "has over" Cloud 
>>> Run is not having to write Dockerfile (except for Flexible custom runtime). 
>>> Did I miss anything? Once Cloud Run goes GA, what use cases would be 
>>> preferable for GAE over it?
>>>
>>
>> I'm wondering the same. Can you share the link to the comparison table 
>> between Cloud Run and App Engine you mentioned?T
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/aa48fa35-1e21-45b3-821e-766f25bf8f44%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[google-appengine] CORS on AppEngine Java

[Joshua Fox]

In AppEngine  Python and Go
, one
defines CORS headers in app.yaml

But in Java, the documentation does not mention this
 How
do I do the equivalent in Java?



-- 


*JOSHUA FOX*
Director, Software Architecture | Freightos



*T (Israel): *+972-545691165 | *T (US)*:  +1-3123400953
Smooth shipping.

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/CAD%3DB7cN%3Du7OH6eEL7jRZGf9eUo3YAOecu7UPPkt-7mLdWFG4oA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[google-appengine] Cloud Tasks getting executed hours beyond their ETA

[Jeff O'Neill]

I have a GAE app (opavote.appspot.com) and yesterday evening around 9PM ET 
(Boston time) I had hundreds of tasks in my task queue that were way beyond 
their ETA (some more than 2 hours overdue).  I clicked the "Run Now" button 
on the Cloud Tasks console hundreds of times to get these tasks executing.

The task queue then seemed to be operating normally.

But this morning, I again had hundreds of tasks that were beyond the ETA 
though a little better in that they were about 90 minutes overdue.  I'm 
again clicking the run now button to get them running.

This seems to be an issue on Google's end.

Is anyone else having this issue, and can Google please comment on what the 
problem is and when a resolution is expected?

My app depends on tasks being executed reasonably close to on time so 1-2 
hour delays is ruining my customer experience.

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/6e172ac8-d7d2-456a-a7ff-4753d3017346%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [google-appengine] Practical difference from Cloud Run

[Gabriel Axel]

This is the comparison table between the different container running 
options: https://cloud.google.com/container-options/

On Thursday, April 11, 2019 at 4:26:55 AM UTC+3, Nicolas Grilly wrote:
>
> On Wed, Apr 10, 2019 at 11:23 PM Gabriel Axel  > wrote:
>
>> I watched the videos and read the docs of the new Cloud Run service and 
>> also took a look at the comparison table between GAE and Cloud Run, and to 
>> my understanding Cloud Run covers everything GAE Standard and Flexible do 
>> without any of their limitations. Maybe the only thing GAE "has over" Cloud 
>> Run is not having to write Dockerfile (except for Flexible custom runtime). 
>> Did I miss anything? Once Cloud Run goes GA, what use cases would be 
>> preferable for GAE over it?
>>
>
> I'm wondering the same. Can you share the link to the comparison table 
> between Cloud Run and App Engine you mentioned?T
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/acf0eebc-c1e0-4b0e-bacd-8ca4201d04da%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[google-appengine] Re: How long will the original App Engine SDK (Python 2.7) be supported?

['Mark Summerfield' via Google App Engine]

Thank you! That is a huge worry off my shoulders:-) 

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/e03355cd-a9dd-4f12-9b6d-1bf954140fe9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.