Ecosystem Infra Rotation

This is a tool for the Ecosystem Infra rotation.

Usage

Visit https://ecosystem-infra-rotation.appspot.com/ and follow the instructions.

If you reload often you might hit the GitHub API limit for unauthenticated requests. If this happens, generate a new access token and pass it in the URL: https://ecosystem-infra-rotation.appspot.com/#GH_TOKEN=abcdef

Dependencies

This is an AppEngine project, so we assume you already have Google Cloud SDK (including Python plugins) set up locally.

You will need to have npm on your machine. (Instructions are omitted as they vary across platforms.) In addition, install python3 and virtualenv, e.g. on Debian/Ubuntu:

sudo apt install python3 virtualenv python3-venv

Running locally

To build and run the tool locally:

./build.sh && dev_appserver.py .

This will serve the tool at http://localhost:8080/.

Most checks work fine locally, but if you want to debug/change the Monorail queries you will need an API key.

Monorail API key

The Monorail queries require a monorail-key.json to be placed in a checkout of this repo. You can create a new JSON private key from the ecosystem-infra GCP project. If you don't have access and think you should, ask stephenmcgruer or robertma. (Note that this is a different GCP project from the one we deploy to.)

See Monorail API access for more details/clues about how this works.

Deploying

To build and deploy to production (you will need to gcloud auth login first):

./build.sh && ./deploy.sh

You do NOT need monorail-key.json for deployment.

Details about authentication

The production deployment does not a private key because we use IAM Service Account Credentials API (iamcredentials.googleapis.com) to create credentials to impersonate the service account with access to Monorail from the default AppEngine service account.