The goal of this codelab is to trigger a Spinnaker pipeline with a Pub/Sub message from GCS upon upload of a tarball.
In this codelab, you will deploy artifacts to Google App Engine (GAE) via a Spinnaker pipeline. The pipeline is configured to trigger on Pub/Sub messages from a GCS bucket serving as an artifact repository. The Pub/Sub messages contain context that allows Spinnaker to parse and deploy the stored artifacts.
This codelab takes about an hour.
This codelab assumes you have a billing-enabled GCP project. Also, install gcloud if you haven’t already.
In the environment where you have
gcloud installed, run the following commands:
$ BUCKET_NAME=gs://<some_name> && PROJECT_ID=<project_id> $ gcloud auth login $ gsutil mb -p $PROJECT_ID $BUCKET_NAME
GCP documentation includes the steps for configuring GCS to publish Pub/Sub messages, but here is a summary.
Enable the Cloud Pub/Sub API .
Name your topic and subscription:
Create the GCS Pub/Sub notification:
gsutil notification create -t $TOPIC_NAME -f json $BUCKET_NAME.
gsutil notification list $BUCKET_NAME.
Create a pull subscription:
gcloud pubsub subscriptions create $SUBSCRIPTION_NAME --topic $TOPIC_NAME.
Note that while configuring the GAE cloud provider, you will create a service account with
enabled and set two environment variables:
In addition to the
roles/storage.admin, the service account also needs
Add the role to the service account:
gcloud projects add-iam-policy-binding $PROJECT \ --role roles/pubsub.subscriber \ --member serviceAccount:$SA_EMAIL # service account email from GAE setup.
Optionally generate a new service account key:
rm $SERVICE_ACCOUNT_DEST && gcloud iam service-accounts keys create $SERVICE_ACCOUNT_DEST \ --iam-account $SA_EMAIL
We’ll need this service account later, so keep these environment variables handy.
First, configure your GCS artifact provider.
Enable artifact support .
Enable the GCS artifact provider:
hal config artifact gcs enable
Add Spinnaker configuration for the GCS artifact provider’s account:
hal config artifact gcs account add --json-path $SERVICE_ACCOUNT_DEST my-artifact-account
Note that we’re using the environment variable set in configuring the GAE provider here.
Now configure Spinnaker to receive messages from your Google Cloud Pub/Sub subscription.
Enable Google Pub/Sub:
hal config pubsub google enable
Add your subscription to Google Pub/Sub:
hal config pubsub google subscription add --project $PROJECT_ID --json-path $SERVICE_ACCOUNT_DEST --subscription-name $SUBSCRIPTION_NAME --message-format GCS my-gcs-subscription
Select a Spinnaker version:
hal config version edit --version <version>. List the available versions with
hal version list.
sudo hal deploy apply
Wait a few minutes for the deploy to complete.
Create an application:
a. Navigate to the Spinnaker UI by going to
localhost:9000 in a browser.
b. Create a new Spinnaker application by selecting
c. Give the application a name and an admin email. If you have more than one cloud provider configured, add ‘appengine’ to the
d. Click the check box beside ‘Consider only cloud provider health when executing tasks’ and create the application.
Create a new pipeline and add an expected artifact.
a. Select the
Pipelines tab in the Spinnaker UI and click
Create to create a new pipeline.
b. After naming the pipeline, you will be brought to the pipeline configuration screen.
c. Add an artifact under the
Expected Artifacts section of the pipeline configuration.
GCS as the artifact type.
e. In the
Object path text box, put
gs://$BUCKET_NAME/app.tar with the explicit value for the bucket name (Spinnaker won’t know about your environment variables).
Configure a pipeline trigger.
a. In the
Automated Triggers configuration section, add a new trigger.
b. Select ‘Pub/Sub’ as the trigger type.
c. Select ‘google’ as the
Pub/Sub System Type and select ‘my-gcs-subscription’ as the
d. Add an attribute constraint with key ‘eventType’ and value ‘OBJECT_FINALIZE’. This prevents your pipeline from triggering twice from one GCS event.
e. Select the ‘…/app.tar’ expected artifact in the
Expected Artifacts drop down.
f. Save the pipeline with the
Save Changes button in the bottom right corner of the pipeline configuration screen.
Create and configure a deploy stage in your pipeline.
Add stage near the top of the configuration screen to add a new stage.
b. Select ‘Deploy’ as the stage
Add server group to open the server group configuration modal.
Basic Settings, select ‘GCS’ as the
d. Select ‘my-artifact-account’ as the
e. Select ‘via pipeline artifact’ in
f. Select the ‘…/app.tar’ artifact in the
Expected Artifact drop down.
Config Files, add ‘app.yaml’ in the
Clone a sample GAE application:
git clone https://github.com/GoogleCloudPlatform/python-docs-samples.git
Package your application as a tarball:
cd python-docs-samples/appengine/standard/hello_world; tar -cvf app.tar *
Upload the tarball to the GCS bucket:
gsutil cp app.tar $BUCKET_NAME