Skip to content

Latest commit

 

History

History
253 lines (172 loc) · 8.66 KB

deploy-to-gcp.md

File metadata and controls

253 lines (172 loc) · 8.66 KB
sidebar_position
2

Google Cloud Platform project deployment guide

The instructions below allow you to deploy Privacy Sandbox Demos on a new Google Cloud Platform project.

The same instructions can be repeated to deploy a dev, staging, prod etc. environment to additional projects.

Project names and variables in italic must be carefully chosen and updated to suit your project naming convention.

Resources : https://firebase.google.com/docs/hosting/cloud-run

Prepare your Google Cloud Platform Billing Account

If you don’t have yet a billing account, follow the documentation to Create a Google Cloud Platform Billing Account : https://cloud.google.com/billing/docs/how-to/manage-billing-account

Prepare your Google Cloud Platform Project

  1. Create a Google Cloud Platform Project : https://cloud.google.com/resource-manager/docs/creating-managing-projects
    1. Note the name of the project/id. E.g.: privacy-sandbox-demos
    2. Assign the billing account created in step above
  2. Add a Firebase Project linked to your GCP Project : https://console.firebase.google.com/
    1. Click "Add Project"
    2. Select the GCP project you previously created. E.g. : privacy-sandbox-demos
    3. Since you enabled Billing Account on this project, it will automatically select the Firebase pay-as-you-go plan
    4. Enable Google Analytics for the project : Select "Default Account for Firebase" unless you have specific analytics requirements

Prepare your Development Environment for Firebase Hosting

In this section we will configure your development environment to get ready to build and deploy resources to Firebase. The Instructions below are based on the Linux environment.

  1. Clone Privacy Sandbox Demos Git Repository : https://github.com/privacysandbox/privacy-sandbox-demos.git
  2. Install the Firebase CLI : https://firebase.google.com/docs/cli#linux
  3. Open a terminal at the root of the project. Login and test the Firebase CLI :
$ firebase login
$ firebase projects:list
  1. Configure firebase to use your project (e.g. )
    1. firebase use --clear
    2. firebase use --unalias default
    3. firebase use --add

Resources :

Setup Firebase Hosting Multiple Sites

Your firebase project will host 5 different sites to demonstrate the capabilities of Privacy Sandbox across the different actors of the adtech ecosystem :

  • Home : Home page with the links to the different use-cases and scenario
  • DSP : Demand Side Platform
  • Shop & Travel : The advertiser shopping or travel site = Buy side. They are buying ad space from the publisher. Site embeds the DSP tags.
  • SSP : Supply Side Platform
  • News : Publisher site where ads will be displayed = Sell side. They are selling ad space to advertisers. Site embeds SSP tags

Each site will have a different domain name to simulate a real life adtech scenario

Open Firebase Hosting : from the Firebase console click on "hosting" or follow this link by replacing "privacy-sandbox-demos" with your project name

https://console.firebase.google.com/project/privacy-sandbox-demos/hosting/sites

Click on "Add another site" and enter site-id following your naming standards. Replace privacy-sandbox-demos with the domain of your choice. E.g.

  • privacy-sandbox-demos-home
  • privacy-sandbox-demos-dsp
  • privacy-sandbox-demos-shop
  • privacy-sandbox-demos-travel
  • privacy-sandbox-demos-ssp
  • privacy-sandbox-demos-news

Note, task above can be done programmatically with Firebase CLI :

firebase hosting:sites:create SITE_ID

E.g.

firebase hosting:sites:create privacy-sandbox-demos-home
firebase hosting:sites:create privacy-sandbox-demos-dsp
firebase hosting:sites:create privacy-sandbox-demos-shop
firebase hosting:sites:create privacy-sandbox-demos-travel
firebase hosting:sites:create privacy-sandbox-demos-ssp
firebase hosting:sites:create privacy-sandbox-demos-news

Set up deploy targets for your sites (When you have multiple sites and you run Firebase CLI deploy commands, the CLI needs a way to communicate which settings should be deployed to each site).

use the following command to setup deploy target for each hosting site :

firebase target:apply hosting TARGET_NAME RESOURCE_IDENTIFIER

E.g. :

firebase target:apply hosting home privacy-sandbox-demos-home
firebase target:apply hosting dsp privacy-sandbox-demos-dsp
firebase target:apply hosting shop privacy-sandbox-demos-shop
firebase target:apply hosting ssp privacy-sandbox-demos-ssp
firebase target:apply hosting news privacy-sandbox-demos-news
firebase target:apply hosting travel privacy-sandbox-demos-travel

Adding hosting sites and deploy targets can be done using the provided script :

scripts/firebase_setup

Note that you will have to change the firebase_hosting_domain variable to match yours :

firebase_hosting_domain="privacy-sandbox-demos";

The firebase hosting configuration for each site is already defined for you in the firebase.json file.

Google Cloud Platform Logging and Monitoring

We recommend to Enable Cloud Logging for Firebase Hosting Project.

By using Cloud Logging with your Firebase Hosting sites, you allow web request logs to be exported to Cloud Logging.

Access the following URL (replace privacy-sandbox-demos with your project name)

https://firebase.corp.google.com/project/privacy-sandbox-demos/settings/integrations/cloudlogging

Select all the sites you want to export logs from, click Save and Finish.

Install Google Cloud SDK & Enable the Google Cloud Run API

Next we will deploy containers to Cloud Run to run the content of the demo sites.

We chose to deploy everything container based for portability and flexibility and we use Firebase hosting as a frontend solution for HTTPS request handling, domain name and ssl certificates.

Install Google Cloud SDK : If Google Cloud SDK is not installed on the machine, follow instructions here : https://cloud.google.com/sdk/docs/install#linux

Initialize Google Cloud SDK : https://cloud.google.com/sdk/docs/initializing

# Run `gcloud init` to setup authentication and project
gcloud init

# Or alternatively run separately the 2 commands :
gcloud auth login
gcloud config set project

# Verify your configuration (account and project) with the command :
gcloud config list

# Enable Cloud Run API
gcloud services enable run.googleapis.com cloudbuild.googleapis.com artifactregistry.googleapis.com

# Setup the default region for deployment
gcloud config set run/region us-central1

Resources : https://firebase.google.com/docs/hosting/cloud-run

Deploy all Cloud Run services and Firebase Sites

Once you have confirmed you can deploy a sample demo application on Cloud Run and access it from Firebase hosting site, you are ready to deploy all the services and hosting sites.

Edit services/.env file to match the ${SERVICE}_HOST parameter to your firebase hosting domain e.g. : privacy-sandbox-demos-${SERVICE}.dev

# services/.env

# External Port (bind by Nginx)
EXTERNAL_PORT=443

# Bind by each Application Server (fixed value)
PORT=8080

# home
HOME_HOST=privacy-sandbox-demos-home.dev
HOME_TOKEN=""
HOME_DETAIL="Home page of Privacy Sandbox Demos"

# Publisher
## news
NEWS_HOST=privacy-sandbox-demos-news.dev
NEWS_TOKEN=""
NEWS_DETAIL="Publisher: News media site"

...

On the same file services/.env update the Origin Trial token on dsp and ssp service to match yours

# Adtech
## dsp
DSP_HOST=privacy-sandbox-demos-dsp.dev
DSP_TOKEN="xxxxx"
DSP_DETAIL="Ad-Platform: DSP for advertiser"

## ssp
SSP_HOST=privacy-sandbox-demos-ssp.dev
SSP_TOKEN="xxxxx"
SSP_DETAIL="Ad-Platform: SSP for publisher"

Edit "project_name" variable value and execute ./scripts/cloudrun_deploy.sh to build and deploy services with Cloud Build and deploy to Cloud Run.

# cloudrun_deploy.sh

#/usr/bin/env zsh

# parameters
project_name="privacy-sandbox-demos";

...

Now edit the "firebase_hosting_domain" variable with your own domain and execute ./scripts/firebase_deploy.sh to deploy Firebase hosting sites and configuration.

# firebase_deploy.sh

#/usr/bin/env zsh

# parameters
firebase_hosting_domain="privacy-sandbox-demos";

...

Look at the output, and verify you can access all the sites your created :

E.g. :

  • https://privacy-sandbox-demos.web.app/
  • https://privacy-sandbox-demos-home.web.app/
  • https://privacy-sandbox-demos-dsp.web.app/
  • https://privacy-sandbox-demos-shop.web.app/
  • https://privacy-sandbox-demos-travel.web.app/
  • https://privacy-sandbox-demos-ssp.web.app/
  • https://privacy-sandbox-demos-news.web.app/