Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve again the security #9

Open
guillaumeblaquiere opened this issue Oct 27, 2019 · 0 comments
Open

Improve again the security #9

guillaumeblaquiere opened this issue Oct 27, 2019 · 0 comments

Comments

@guillaumeblaquiere
Copy link
Contributor

The Cloud Run is deployed in public mode (--allow-unauthenticated flag). This allows anybody the capability to trigger an export, and if it's done continuously, it can decrease Firestore performances and strongly increase the amount of data store in Cloud Storage.

I recommend to deploy the Cloud Run, in private mode (use --no-allow-unauthenticated flag) and to create a new service account for the Cloud Scheduler. Grant this service account with the role run.invoker on the Cloud Run service and deploy Cloud Scheduler with the service account.

(Only the file README.md will be impacted on this feature)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant