Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Research on how to run conf.builderscon.io in GAE #37

Open
richardimaoka opened this issue Jul 24, 2016 · 4 comments
Open

Research on how to run conf.builderscon.io in GAE #37

richardimaoka opened this issue Jul 24, 2016 · 4 comments
Labels
priority: LOW

Comments

@richardimaoka
Copy link
Collaborator

(assigned to myselfのつもり)

conf.builderscon.ioはシンプルなのでGAEで走らせます。

八月に入ってから取り掛かる予定です。
@lestrrat
Copy link
Contributor

これ、ちょっとキャッシュまわりの戦略のために考えたかったので今日見ちゃいました。

でも色々問題はあるので、とりあえず自分がやったところまであげておきます。

lestrrat added a commit that referenced this issue Jul 30, 2016
@lestrrat
Beginning of GAE port
b14b8cf 
Notes:
* Still unclear how we should handle secret information such as
  keys and tokens.
* app.wsgi better be renamed to app.py
* In GAE, we would have to use memcached, so Redis must be changed.
* For https, certificates will have to be handled differently :/

So we still can't just migrate to GAE, but this is a start, so I will
commit, and keep it.

refs #37
lestrrat added a commit that referenced this issue Jul 30, 2016
@lestrrat
Move app.wsgi to app.py, and add app.yaml
63e9be7 
refs #37
@richardimaoka
Copy link
Collaborator Author

richardimaoka commented Aug 6, 2016 •
edited

忘れないうちに調査内容の書きとめ。

標準のAppEngine向けSSL証明書更新手順

標準のやり方では、SSL証明書の更新はWeb上のAppEngineコンソールから手動でやらないといけないようです。(自分でこの辺をエミュレートするツールを書くなどしない限り)

Issue 12535: All we need is a gcloud command to update the app engine SSL cert, and then we can use whatever certification authority we want to whether it's LE, or even StartEncrypt is going to start using ACME soon.

gcloud APIの調査

このコマンドは"gcloud compute"コマンドで、同レファレンスを見ても"gcloud app"で同様のコマンドはありません。

AppEngine Web Consoleがどう動いているか？

さいごにWeb上のAppEngineコンソールもデバッグしてみましたが、以下のようなコンソール用のURLに対して　https://console.cloud.google.com/m/sslCertificate?pid=conf-test-1470265052103
pasted image at 2016_08_07 09_37 am

証明書と鍵とPOSTするリクエストを送っているので、ログインせずに証明書をアップロードできるAPIは存在しないようです、という結論。

pasted image at 2016_08_07 09_39 am

@richardimaoka
Copy link
Collaborator Author

richardimaoka commented Aug 7, 2016 •
edited

@lestrrat さんとのチャットで、GAEの方が遥かにコストパフォーマンスに優れるので、証明書更新のところだけ手作業してもよい、とのことです。 <-スイマセン、間違ってました。以下のコメントより

あとは@zoncoenさんの証明書期限切れ監視→Slack通知との連携か？

@lestrrat
Copy link
Contributor

lestrrat commented Aug 7, 2016

ニュアンス違うｗ
クローズする、って宣言されたので 「いや、オープンなままでいいんじゃないの？」ですよ！
手作業で良い、ではないです！w 手作業は当然可能な限り避けたいけど、なんか良いAPIがGoogleからでるとか、ツールが見つかるとか、はたまた誰かが自分で書いちゃうか、を待つってことも含め、クローズする必要ないよね、ってだけです。

lestrrat added a commit that referenced this issue Aug 7, 2016
@lestrrat
Beginning of GAE port
3360711 
Notes:
* Still unclear how we should handle secret information such as
  keys and tokens.
* app.wsgi better be renamed to app.py
* In GAE, we would have to use memcached, so Redis must be changed.
* For https, certificates will have to be handled differently :/

So we still can't just migrate to GAE, but this is a start, so I will
commit, and keep it.

refs #37
@lestrrat lestrrat mentioned this issue Aug 7, 2016
Merged
@richardimaoka richardimaoka mentioned this issue Aug 13, 2016
Merged
richardimaoka added a commit that referenced this issue Aug 14, 2016
@richardimaoka
memcache is working on local GAE dev server, and on vagrant #37
8d1c848
richardimaoka added a commit that referenced this issue Aug 14, 2016
@richardimaoka
Switch between Redis and Memcached via an environment variable #37
a6e6c5c
richardimaoka added a commit that referenced this issue Aug 14, 2016
@richardimaoka
Avoid unnecessary no-op git diff in app.py #37
f4ddbb8
richardimaoka added a commit that referenced this issue Aug 14, 2016
@richardimaoka
Remove unnecessary memcached comment in README #37
07a5cfb
richardimaoka added a commit that referenced this issue Aug 14, 2016
@richardimaoka
No need to print what memcached instance is used #37
c2310ac
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
priority: LOW
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@lestrrat @richardimaoka