FilesExpand file tree

 master

/

credentials.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

55 lines (46 loc) · 2.03 KB

 master

/

credentials.py

Copy path

Top

File metadata and controls

• Code
• Blame

55 lines (46 loc) · 2.03 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

# Copyright 2021 Google LLC

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

# http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

import json

import os

from typing import Dict

from google.cloud import secretmanager

from middleware import logger

# [START cloudrun_user_auth_secrets]

def get_cred_config() -> Dict[str, str]:

if "CLOUD_SQL_CREDENTIALS_SECRET" in os.environ:

name = os.environ["CLOUD_SQL_CREDENTIALS_SECRET"]

client = secretmanager.SecretManagerServiceClient()

response = client.access_secret_version(request={"name": name})

logger.info("Credentials pulled from CLOUD_SQL_CREDENTIALS_SECRET")

return json.loads(response.payload.data.decode("UTF-8"))

# [END cloudrun_user_auth_secrets]

else:

logger.info(

"CLOUD_SQL_CREDENTIALS_SECRET env var not set. Defaulting to environment variables."

)

if "DB_USER" not in os.environ:

raise Exception("DB_USER needs to be set.")

if "DB_PASSWORD" not in os.environ:

raise Exception("DB_PASSWORD needs to be set.")

if "DB_NAME" not in os.environ:

raise Exception("DB_NAME needs to be set.")

if "CLOUD_SQL_CONNECTION_NAME" not in os.environ:

raise Exception("CLOUD_SQL_CONNECTION_NAME needs to be set.")

return {

"DB_USER": os.environ["DB_USER"],

"DB_PASSWORD": os.environ["DB_PASSWORD"],

"DB_NAME": os.environ["DB_NAME"],

"DB_HOST": os.environ.get("DB_HOST", None),

"CLOUD_SQL_CONNECTION_NAME": os.environ["CLOUD_SQL_CONNECTION_NAME"],

}