deploying web application on GAE - python-2.7

when I want to put my project on GAE i get this error in SDK shell:
ERROR: (gcloud.app.deploy) Permissions error fetching application [apps/responsive-my-super-app-201910]. Please make sure you are using the correct project ID and that you have permission to view applications on the project.

You haven't authenticated the cloud SDK. Try running gcloud auth list. Is your email included in the credentialed accounts? If not, run glcoud auth login.
If you are listed in the credentialed accounts, then perhaps you haven't properly associated your project with your login, or you have a typo in your project name.

Related

How to authorize via Google API from WebApp with an unknown URL?

I'm trying to build a plugin for a WordPress App, that uploads file to the users Google Drive space. I don't want the end user to create the Cloud Console Project. but rather just have him give consent so the plugin can access the needed data from his Google Drive account.
When I create OAuth 2.0 Client IDs in the Google Cloud Console (Web Application), Google asks for Authorized JavaScript origins and Authorized redirect URIs. Since the plugin will be portable and can be installed on different websites I can't define this.
How can this be solved that an OAuth2 Authentication by the user can be done, without knowing the URL where the app is running?
Thanks
You cant. Redirect uri must be configured properly, to point webserver the code authorization is running on.
You will need to instruct your users in how to create their own client.
Also as this is a WordPress application, you would need to share your client id and secret with the users. This is also against googles TOS.
possible workaround.
If you put up an authorization server on your own server. The users of your app could then login though that. A refresh token will be returned to their website running your app and stored locally. Your code could then run using the refresh token to access their data.
However you are then going to be responsible for verifying an app with google drive scopes.

Parameters: [unauthRoleName] must have values

I am trying to deploy my data model for a react native App on AWS amplify. After creating my model and importing my custom Auth from the cognito user pool i created Ealier. but i keep getting this error "Parameters: [unauthRoleName] must have values." on deployment. Please How do I solve this?
I had exactly the same issue. I Ctrl+F the "unauthRoleName" in my amplify project and found out there were some that started with lowercase and some with uppercase and then changing those with lowercase to uppercase fixed the issue!
I was having a similar issue.
Here's what helped:
Remove the identity pools
Unlink the authentication from Amplify
Create a new identity pool and link the user pool with the identity pool
Link back the authentication to amplify
This might break the Amplify studio interface. To fix that, simply disable and then enable the amplify studio
Are you doing it from Amplify Studio?
I faced a similar problem for my React.js project while doing it from Amplify Studio. But using Amplify CLI from the root folder of the project, I could deploy it.
Pro Tip:
In case you have copied the project to a new location/machine,
run amplify configure and amplify init again to ensure there is no
team-provider-info.json does not exist error

Unable to delete service provider in wso2

I have seen two service providers added to my wso2 installation.
As I try to delete any of the service providers I get an error
Error while removing application: Deletion of system applications are not allowed. Application Name: XXX
I have logged in from admin user and still, I am not able to delete it
I tried giving permissions of service provider explicitly to the admin user but still the same error
Hope you are using IS 5.11.0 above.
Conosle and MyAccount are the two systems apps available in the IS pack. It doesn't allow to modify/ delete the system apps.
Console is the newer portal for administrative tasks.
https://stackoverflow.com/a/65733363/10055162
MyAccount is the newer version of
previous user portal/ dashboard.
So deleting these apps are not recommended.
Anyhow, If you want to remove both Myaccount and Console apps out of the readonly apps (allow to modify the app configs/ delete the apps), use the following config.
[system_applications]
read_only_apps = []
Then restart the server. You will be able to do configuration changes now. Refer:
https://is.docs.wso2.com/en/5.11.0/setup/migrating-what-has-changed/#configurable-system-apps
https://stackoverflow.com/a/68167283/10055162

Can external apps modify SSO settings?

Can an app external to a G-Suite organization manage its SSO settings?
I started by trying to create a client ID/secret for my app as per https://support.google.com/cloud/answer/6158849
A prerequisite for getting a client ID/secret is configuring the app's Consent Screen as per https://support.google.com/cloud/answer/6158849#userconsent
When looking at the "Add Scope" modal, I only see:
Admin SDK ../auth/admin.reports.audit.readonly
Admin SDK ../auth/admin.reports.usage.readonly
How do I get a scope that would allow my app write access to another G-Suite organization's SSO settings?
I am not trying to manage my G-Suite organization's SSO settings.
What you want cannot be achieved essentially because you cannot manage someone else's G-Suite organization's SSO settings. Therefore, no scopes are available for this option.
But if you have access to the domain mentioned, you can use this scope which is the global scope for access to all domain settings.
https://apps-apis.google.com/a/feeds/domain
According to the documentation:
To request access using OAuth 2.0, your application needs the scope information, as well as information that Google supplies when you register your application (such as the client ID and the client secret).
The old admin settings API is still working for SSO settings, just tried. You can manage the SSO settings of any organization that has enabled your project ID with the scope https://apps-apis.google.com/a/feeds/domain/ via a Marketplace install (they install your app) or a manual install as described here

Clone GCP project with Terraformer\Terraform

I just started playing with Inferstracture as a code in Google cloud.
Installed Terraform
Installed Terraformer
Created a new GCP project with a virtual machine in it.
My goal is to duplicate the project, with all it's component, into a new project.
In order to do so, I using Terraformer to reverse terraform my existing project. Command:
$ terraformer import google --connect --projects=[project_id] --resources=autoscalers,backendBuckets,backendServices,bigQuery,cloudFunctions,cloudsql,dataProc,disks,dns,firewalls,forwardingRules,gcs,gke,globalAddresses,globalForwardingRules,healthChecks,httpHealthChecks,httpsHealthChecks,iam,images,instanceGroupManagers,instanceGroups,instanceTemplates,instances,interconnectAttachments,kms,memoryStore,monitoring,networkEndpointGroups,networks,nodeGroups,nodeTemplates,project,pubsub,regionAutoscalers,regionBackendServices,regionDisks,regionInstanceGroupManagers,routers,routes,schedulerJobs,securityPolicies,sslPolicies,subnetworks,targetHttpProxies,targetHttpsProxies,targetInstances,targetPools,targetSslProxies,targetTcpProxies,targetVpnGateways,urlMaps,vpnTunnels
2019/06/20 08:00:08 google importing project [project_id]
2019/06/20 08:00:08 google importing... autoscalers
2019/06/20 08:00:19 googleapi: got HTTP response code 404 with body: Not Found
Seems like I have kind of permission problem since google-api reply with Not-Found error code.
I guess Terraformer is accessing is using gcloud permissions to access my gcp environment, is this true?
If it's true, my logged in credientails are owner on this project.
What should I check? How to fix this issue?
You can use service account with read access to project. And set GOOGLE_CLOUD_KEYFILE_JSON to point to credentials.json of that service account.