Using gcloud-golang from Managed VMs

[Chris Broadfoot]

Hello everyone,

If you're not using the gcloud-golang library ("google.golang.org/cloud") from Managed VMs, this won't affect you.

I just submitted a change to the OAuth library that allows it to be used in a more flexible way from App Engine Managed VMs.

Previously, you needed to use a context returned by appengine.NewContext ("google.golang.org/appengine"). Now, you can use any context (e.g. context.Background()).

If you're using the datastore package ("google.golang.org/cloud/datastore") with the default application credentials, you'll need to give access to the "userinfo.email" scope to the default service account. The "cloud-platform" scope is enabled by default, and that gives access to datastore, storage, pubsub, etc.

You can do this by adding the following to your app.yaml:

beta_settings:

  # NOTE: userinfo.email is required by the Datastore API.

  service_account_scopes: >

    https://www.googleapis.com/auth/userinfo.email

Cheers

Chris