Skip to content

fix: inject service account cred at application boot

Shinya Maeda requested to merge init-gcp-service-account-during-application-boot into main

What does this merge request do and why?

This MR fixes the issue https://gitlab.com/gitlab-org/gitlab/-/issues/461243+ by creating a service account cred file at application boot time, instead of service specific initialization for Vertex AI.

In order to properly fix, we introduce a global configuration for entire GCP services. The parent value is inherited to the child configs, e.g.

"AIGW_GOOGLE_CLOUD_PLATFORM__<field>"
=> copy to "AIGW_VERTEX_TEXT_MODEL__<field>" if the service specific configurable does not exist.
=> copy to "AIGW_VERTEX_SEARCH__<field>" if the service specific configurable does not exist.

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

Merge request checklist

  • Tests added for new functionality. If not, please raise an issue to follow up.
  • Documentation added/updated, if needed.
Edited by Shinya Maeda

Merge request reports