Home

Santa

Santa Docs

• https://santa.readthedocs.io/en/latest/

Upvote

metrics: https://app.google.stackdriver.com/?project=santaupvote

Tips

Item	HowTo
View logs	gcloud app logs tail -s santa-api

Backup/Restore

We're currently doing bi-weekly backups, configured via cron.yaml. In order to see, and restore a backup go to https://console.cloud.google.com/datastore/settings?organizationId=485344983296&project=santaupvote, and then click Open Datastore Admin. There you can see a list of the backups and restore any of them

Diffing against google/upvote/master

https://github.com/google/upvote/compare/627be9243fd09f3a79f2eb7ac717b33f4d6e205f...farmersbusinessnetwork:master

replace the sha1 with the last merged sha1

Setting up your local gcloud

gcloud auth login
gcloud config set account [YOUR_FBN_EMAIL]
gcloud config set project santaupvote

Deploying

Replacing default "auto" version:

fbn/deploy.py

With custom version:

fbn/deploy.py --version v2

NOTE: If you deploy with a custom version, you need to migrate/split clients to the new version: https://console.cloud.google.com/appengine/versions?organizationId=485344983296&project=santaupvote&serviceId=santa-api&versionssize=50

Cleaning build directory

bazel clean --expunge

Example API endpoints

https://santaupvote.appspot.com/api/web/votes/query https://santaupvote.appspot.com/api/web/users/query https://santaupvote.appspot.com/api/web/alerts/APPLIST/ALL https://santaupvote.appspot.com/api/web/settings/FailsafeAdministrators

Auth TODO

• Enable santa client auth
  • Enable code in upvote (ValidateClient)
  • Enable client validation in santa (ClientAuthCertificateIssuerCN: https://santa.readthedocs.io/en/latest/deployment/configuration/)
• Restrict login to upvote to FBN employees (see IAP: https://console.cloud.google.com/security/iap?orgonly=true&supportedpurview=project&project=santaupvote&organizationId=485344983296&folder). Actually did this via application settings: https://console.cloud.google.com/appengine/settings?organizationId=485344983296&project=santaupvote
• have santa use full email addresses as primary user for host

Security

• Best Practices:

Bugs Logged against Google

• Their "emergency" button/mode doesn't say what to does, and does not seem to work: https://github.com/google/upvote/issues/22
• Updating default client mode causes all hosts to get reset: https://github.com/google/upvote/issues/21
• Filter hosts by primary user: https://github.com/google/upvote/issues/20 (amohr implemented it on our side)
• Getting XSRF errors: https://github.com/google/upvote/issues/15
• How to work with service account: https://github.com/google/upvote/issues/16
• Prevent upvote controlling client mode: https://github.com/google/upvote/issues/11
• FBN Enhancements: https://github.com/google/upvote/issues/24
• Getting timeout errors: https://github.com/google/upvote/issues/32

Emergency instructions

Disable Santa Locally

sudo launchctl unload /Library/LaunchDaemons/com.google.santad.plist

Rolling back DB

Backups are done bi-weekly: https://github.com/farmersbusinessnetwork/upvote/blob/master/upvote/gae/cron.yaml#L23

To roll back go to: https://console.cloud.google.com/datastore/settings?organizationId=485344983296&project=santaupvote

Rolling back version

You can have multiple versions deployed per deploy steps above. In order roll back a version, you would just migrate all traffic to the old version here: https://console.cloud.google.com/appengine/versions?organizationId=485344983296&project=santaupvote&serviceId=default&versionssize=50