Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Let users use their own Google Cloud account for TTS #29

Open
rozbb opened this issue Sep 12, 2022 · 1 comment
Open

Let users use their own Google Cloud account for TTS #29

rozbb opened this issue Sep 12, 2022 · 1 comment
Labels
enhancement New feature or request

Comments

@rozbb
Copy link
Owner

rozbb commented Sep 12, 2022

It should be possible to make RTMS use a service account that can bill to subordinate accounts. This would allow me to run a persistent RTMS server and only pay for storage, rather than the expensive TTS bills too.

The flow would roughly be:

  1. User makes a Google Cloud account just like in Getting Started
  2. User logs into RTMS and is presented with a special authentication link
  3. User clicks the link, which will take them to GCP and ask if they want to give access to their TTS API key. User clicks OK
  4. User returns to RTMS and can use it on their own dime.
@rozbb rozbb added the enhancement New feature or request label Sep 12, 2022
@rozbb
Copy link
Owner Author

rozbb commented Sep 12, 2022

A quote from someone more knowledgeable:

You should just run the thing on either Cloud Run or a GCP VM that has ambient rotated credentials the metadata api (you can tell it that you want the app to have access to the service account and it will provide short-lived credentials automatically)
Then they just give you the project name and you can access the API with your service account and it'll be billed to them
And if you host on GCP or federate auth with AWS, you can avoid having any persistent API credentials at all
Nothing about that would require vendor lock-in, Cloud Run just runs a container image and you can run whatever you want however you want on a GCE VM

And some helpful links:

https://cloud.google.com/iam/docs/service-accounts#short-lived-credentials

https://cloud.google.com/iam/docs/service-accounts#google-managed-keys

https://cloud.google.com/run/docs/securing/service-identity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant