milo/service-pubsub.yaml

service: pubsub
runtime: go116

instance_class: F4_1G

automatic_scaling:
  min_idle_instances: 5
  max_idle_instances: automatic
  min_pending_latency: 30ms
  max_pending_latency: automatic
  max_concurrent_requests: 3

# luci_gae_vars is interpreted by gae.py, for apps deployed manually.
# It maps the app ID being deployed to values of vars used below.
luci_gae_vars:
  luci-milo-dev:
    AUTH_SERVICE_HOST: chrome-infra-auth-dev.appspot.com
    CONFIG_SERVICE_HOST: luci-config.appspot.com
    TS_MON_ACCOUNT: app-engine-metric-publishers@prodx-mon-chrome-infra.google.com.iam.gserviceaccount.com
    OAUTH_CLIENT_ID: 897369734084-d3t2c39aht2aqeop0f42pp48ejpr54up.apps.googleusercontent.com
    OAUTH_CLIENT_SECRET: sm://oauth-client-secret
    OAUTH_REDIRECT_URL: https://luci-milo-dev.appspot.com/auth/openid/callback
    ROOT_SECRET: sm://root-secret
    TINK_AEAD_KEY: sm://tink-aead-primary
    REDIS_ADDR: 10.82.28.60:6379
    DS_CACHE: redis
    VPC_CONNECTOR: projects/luci-milo-dev/locations/us-central1/connectors/connector
    LOGIN_SESSIONS_ROOT_URL: https://luci-milo-dev.appspot.com

vpc_access_connector:
  name: ${VPC_CONNECTOR}

handlers:
- url: /_ah/warmup
  script: auto
  secure: always

# Pubsub Handler.
- url: /push-handlers/.*
  script: auto
  secure: always

inbound_services:
- warmup

entrypoint: >
  main
  -auth-service-host ${AUTH_SERVICE_HOST}
  -config-service-host ${CONFIG_SERVICE_HOST}
  -ts-mon-account ${TS_MON_ACCOUNT}
  -cloud-error-reporting
  -root-secret ${ROOT_SECRET}
  -primary-tink-aead-key ${TINK_AEAD_KEY}
  -encrypted-cookies-client-id ${OAUTH_CLIENT_ID}
  -encrypted-cookies-client-secret ${OAUTH_CLIENT_SECRET}
  -encrypted-cookies-redirect-url ${OAUTH_REDIRECT_URL}
  -redis-addr ${REDIS_ADDR}
  -ds-cache ${DS_CACHE}
  -login-sessions-root-url ${LOGIN_SESSIONS_ROOT_URL}