IssueTracker

Prior to the release earthengine-api==1.5.0 (13 hours ago when I write down this message) it was still possible to Initialize GEE without specifying the project when using a service account private key as the project itself was specified in the json.

All LDC infrastructure is built on top of service account as it's the only way we can correctly manage the costs. Thus the internal package we made reaches an Azure keyvault to get a API json key and then runs the following code (at the end of my message).

The latest change to the API is making all our GEE based infrastructure (notebooks, pipeline, examples dash aplications) fail with the following message:

File "/usr/local/lib/python3.10/site-packages/ee/init.py", line 193, in Initialize raise EEException(NO_PROJECT_EXCEPTION) ee.ee_exception.EEException: ee.Initialize: no project found. Call with project= or see http://goo.gle/ee-auth.

So it's seems that now without any warning in a simple feature push (1.4.x -> 1.5.0) you dropped one of the existing initialization schema. Did I missed the warning message that were send for the last 5 to 10 releases ? if yes can you point me to them ? Did I miss a communication about this method to be dropped soon, if yes can you point me to it?

If the answer to the 2 previous question is no, I would appreciate you make it possible for LDC to connect again to earthengine by reverting your latest change.

    def from_account(
        cls,
        account_name: str = "",
        disable_ssl: bool = False,
        change_account: bool = False,
        keyvault_str: Optional[str] = None,
    ) -> None:
        """Initialize the Earth Engine API with a specific service account.

        Args:
            account_name: The name of the service account to use, it can be a short name as "brazil-compute" or the full name as "earth-engine-brazil-compute".
            disable_ssl: when ``True``, disables SSL certificate validation. Workaround for DSVMs. Default value: ``False``.
            change_account: prevent accidental change account if ``False``, allows it if ``True``.
            keyvault_str: the keyvault string to use for the authentication. If ``None``, the default keyvault is used.

        Examples:
            .. code-block::

                import ee, LDCGEETools

                ee.Initialize.ldc.from_account("brazil-data")
                ee.Number(1).getInfo()
        """
        # check if the account is already initialized
        if _account_name is not None and not change_account:
            raise RuntimeError(
                "An account is already initialized, please use `change_account=True`"
                f"to change from `{_account_name}` to `{account_name}`"
            )

        # load the kevault and extract the GCS authentication keys
        key_vault_manager = KeyVaultManager(keyvault_str)
        try:
            secret = key_vault_manager.get_key_vault_secret(account_name)
            atoms = parse_connection_string(secret)
            ee_user, ee_token = atoms["username"], atoms["private_key"]
        except ResourceNotFoundError:
            msg = (
                f'Account "{account_name}" not found in the keyvault, '
                f"please use one of: {cls.account_list()}"
            )
            raise ValueError(msg) from None  # to avoid display the caught error

        # connect to GEE using a temp file to avoid writing the key to disk
        with tempfile.TemporaryDirectory() as temp_dir:
            file = Path(temp_dir) / "ee_token.json"
            file.write_text(ee_token)
            credentials = ee.ServiceAccountCredentials(ee_user, str(file))
            http_transport = Http(disable_ssl_certificate_validation=disable_ssl)
            ee.Initialize(credentials=credentials, http_transport=http_transport)
            _account_name = account_name