Explain in UI which scopes available by default on instance creation with `Allow API access to all Google Cloud services in the same project.` [35904756]

Assigned

Bug

Status Update

No update yet.

Description

dy...@gmail.com

created issue #1

Dec 20, 2015 06:33AM

When selected `Allow API access to all Google Cloud services in the same project.` on instance creation, it does **not** include User Info scope, which is important to communicate with App Engine applications. This should be reflected in the UI to avoid confusing.

Please see stackoverflow question & answer:

http://stackoverflow.com/questions/34368039/secure-way-to-communicate-with-app-engine-from-compute-engine/34368040#34368040

Comments

fa...@google.com <fa...@google.com> #2Dec 23, 2015 08:03PM

Assigned to fa...@google.com.

Thank you for bringing this to our attention. I was able to reproduce this issue and have forwarded your report to the engineering team any questions they have will be posted here. Further status updates will be posted here as well.

ia...@gmail.com <ia...@gmail.com> #3Aug 3, 2016 02:59PM

I've also found that the "

https://www.googleapis.com/auth/cloud-platform" scope does not include "

https://www.googleapis.com/auth/taskqueue".

Should this be reported as a separate issue?

dy...@gmail.com <dy...@gmail.com> #4Aug 3, 2016 03:03PM

It looks like they have changed the whole scope model with new Identity & Access Management. At least for new instances, I cannot choose scopes anymore. Only service account and then I have to configure that service account using IAM. I hope they will provide some migration guide.

fa...@google.com <fa...@google.com> Apr 24, 2017 06:17PM

Reassigned to gc...@google.com.

Issue 35904756

Description

Issue summary

Comments

fa...@google.com <fa...@google.com> #2Dec 23, 2015 08:03PM

ia...@gmail.com <ia...@gmail.com> #3Aug 3, 2016 02:59PM

dy...@gmail.com <dy...@gmail.com> #4Aug 3, 2016 03:03PM

fa...@google.com <fa...@google.com> Apr 24, 2017 06:17PM

Add comment

Issue metadata