zydronium/google-nomulus
1
0
Fork 0
mirror of https://github.com/google/nomulus.git synced 2025-06-28 07:13:34 +02:00
Code Issues Projects Releases Packages Wiki Activity

Add instruction on how to set "App Engine Admin" permission

Browse source 
The proxy service account needs a role that is considered "App Engine Admin" for OAuth to work.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=193049418
This commit is contained in:
jianglai 2018-04-16 09:13:08 -07:00
parent 7f86f2c1fb
commit d036d72dda
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
docs/proxy-setup.md
View file

@ -145,6 +145,15 @@ oAuth:
- <client_id>
```
This service account also needs to be an ["App Engine Admin"](https://github.com/google/nomulus/blob/3dfd141e0fed650b5eb2631b4345220355221b77/java/google/registry/request/auth/UserAuthInfo.java#L31),
which means it needs to granted a role like "Project Viewer":
```bash
$ gcloud add-iam-binding <nomulus-project> \
--member=serviceAccount:<service-account-email> \
--role=roles/viewer
```
### Setup nameservers
The terraform output (run `terraform output` in the environment folder to show