GPG GCS File Decryptor on Cloud Run

[@dayvidmonteiro3451]

Hi Richard, It is a great video, congrats! Could you explain better what Cloud Memory does and it works ?

[@practicalgcp2780]

Thank you. I didn’t get your question, what is cloud memory? I don’t remember mentioning such thing

[@dayvidmonteiro3451]

You said at 8:07 min of the video, something like that

[@practicalgcp2780]

@@dayvidmonteiro3451 oh I see what you mean. What I was saying is simply you do all of this in code and in RAM, without saving / persisting any files on disk in the process. This way you don’t have to run into the risk having the clean up the files which will have decrypted contents in there

[@MANIPRAKASH1685]

Hi Richard, Cloud functions(v1) with Python Runtime version 3.9 & lower supports GPG pre-installed. I can easily integrate with Secret Manager as well. What's your thought's on this approach?

[@practicalgcp2780]

I am not sure it’s better because of two main reasons. 1) concurrency for secret manager, v1 cloud function does not support instance level bootstrapping. Which means you could end up making too many requests to secret manager and hit the quota if you have too many files arriving at the same time. 2) the trigger of cloud functions I believe is from a PubSub topic / eventarc, not subscription. This way I am still not sure it’s a good idea because if a message is lost due to fail to be processed you cannot retry it easily. Tbh even cloud function v2 I tried quite extensively the other day, and can’t say I recommend it compares to cloud run. Due to integration options with PubSub is limited to topic / eventarc, where I couldn’t find a reliable way to make sure an event is definitely processed in the event of failure. With PubSub subscription unless you acknowledge a message yourself, it will always go back to the subscription again to be retried. You can try it to see if it works for your use case but make sure you check what happens when a message cannot be processed due to whatever reason. And work out a way to retry if it’s not processed correctly