VPN connection for Firebase Test Lab devices

[Basim Sherif]

Hello,

We have a requirement that we need to run the automated tests in Firebase Test Lab against our CI/Staging environment. But this can be only accessed through a VPN connection so we were thinking about whit-listing the Test Lab devices IP addresses (https://firebase.google.com/docs/test-lab/android/get-started#ip-blocks). Can someone help me answering below questions?

1. Can there be a dedicated IP addresses assigned to our devices so that we can make sure that it's secure? We are mostly worried about someone else having unrestricted access to our network using these devices if the IP addresses are shared.

2. Does Firebase protect access to the device logs and sensitive information when the app is making API calls to our backend services? 

[paul...@google.com]

Basim, apologies that your question wasn't noticed sooner.

1. No, it is not possible to have dedicated IPs for just the devices you use in FTL. All FTL devices are a common resource in a shared lab. Any given device may be running untrusted code from third parties.

2. FTL does protect device logs and sensitive info. Virtual devices are deleted after each test run, and physical devices are thoroughly cleaned up after each test run. Logs from your test run are stored in an authenticated database that only your Cloud/Firebase project can access. Note: the logs can also be accessed by members of our team's on-call rotations if they are asked to debug an issue.