spring-cloud-gcp | New home for Spring Cloud GCP development | Build Tool library

Looking at the stack trace, SimplePubSubMessageConverter is choking on the Object being published. Looking at the doc for that class:

... maps payloads of type byte[], ByteString, ByteBuffer, and String to Pub/Sub messages

Change:

Set the projectId using gcloud-cli

You are inheriting version for com.google.cloud:spring-cloud-gcp-dependencies from project.version, which is 2.3.12.RELEASE in your case.

Deployment and runtime are 2 different things. At deployment, user must have the permission to deploy a new service. You have 3 roles that you can find in the documentation

At runtime, by default, the App Engine default service account is used. And, as you fill it, it's not a good practice because:

• The default role is Editor, that grant the service account too much permissions
• If you have 2 different services, both have the same permissions because they use the same identity (service account)

That's why, they have finally release a great feature: user managed service account

You simply have to set the service account email in the app.yaml file, and that's all. You have a dedicated service account for your App Engine service.

Now you have the identity that you want at runtime. At runtime, you want to get a secret. So, you must grant the runtime identity to be able to access the secret.

HOWEVER, because you already have a specific and dedicated identity for your App Engine service, loading a service account key file from secret manager makes no sense! Use directly the runtime identity!

The problem is that most likely, Feign autoconfiguration happens early on, before GcpSecretManagerEnvironmentPostProcessor had a chance to run and introduce ByteString converters.

Basically, the solution that works is to implement a Custom Converter which implements the Generic Conversion Service and register the Converter in the main method before calling SpringApplication.run.

The method com.google.api.gax.core.GoogleCredentialsProvider$Builder com.google.api.gax.core.GoogleCredentialsProvider$Builder.setUseJwtAccessWithScope(boolean) was introduced in com.google.api:gax in version 2.3.0.

Can you

1. run mvn dependency:tree and confirm that your version of com.google.api:gax is above version 2.3.0?

2. upgrade all Google libraries to the latest version?

Here is a similar issue found on the internet.

I fell into a similar situation recently and after pulling my hair for a long time and debugging, this is how I could make it work. First of all, create a generic converter. This code is in Kotlin:

I solved that through easy way. I only added this code in logback.xml.That is I changed log level of io.grpc.netty.shaded.io.grpc.netty to debug from info.

I solved the problem making it as simple as possible, I ended up deleting the Bean DefaultPublisherFactory and solved the problem.