Add project ID and build secret separately

SkyTruth · Oct 24, 2023 · 1618052 · 1618052
1 parent 5935f45
commit 1618052
Showing 1 changed file with 8 additions and 7 deletions.
diff --git a/stack/cloud_function_ais_analysis.py b/stack/cloud_function_ais_analysis.py
@@ -76,6 +76,13 @@
     ),
 )
 
+gfw_credentials = cloudfunctions.FunctionSecretEnvironmentVariableArgs(
+    key="GOOGLE_APPLICATION_CREDENTIALS",
+    secret=pulumi.Config("ais").require("credentials"),
+    version="latest",
+    project_id=pulumi.Config("gcp").require("project"),
+)
+
 fxn = cloudfunctions.Function(
     function_name,
     name=function_name,
@@ -89,13 +96,7 @@
     service_account_email=cloud_function_service_account.email,
     available_memory_mb=1024,
     timeout=540,
-    secret_environment_variables=[
-        cloudfunctions.FunctionSecretEnvironmentVariableArgs(
-            key="GOOGLE_APPLICATION_CREDENTIALS",
-            secret=pulumi.Config("ais").require("credentials"),
-            version="latest",
-        )
-    ],
+    secret_environment_variables=[gfw_credentials],
 )
 
 invoker = cloudfunctions.FunctionIamMember(