GAE deployment queries

[Vinit Payal]

I was trying to create a deployment for GAE application. Have below queries:- 

1. Where do I actually store my service account key which has permission to deployment access, path of which is stored in $KEY_FILE, due to security reasons we can't make it part of code and also can't even store it somewhere publicly.
2. How do I use different GAE `app.yaml` files for different environments, reason being we don't want to have same instance size etc in development, staging and production environment and even in our case name of GAE service is different for each environment.

To explain how we are doing it right now, please refer below screenshots of two yaml files staging_app.yaml for staging environment and dev_app.yaml for development enviroment.

1) dev_app.yaml

2) staging_app.yaml

Ideal way would be to add a variable to decide path of gae yaml file, please let me know how can above two be taken care of?

[Alexander Zhukov · Accepted solution]

Hi Vinit :) Let me try to answer your questions

1. To store sensitive variables you can use Pipelines Variables. In particular, please refer to Secure variable masking section in our documentation. These are not public and only available to people who have admin access to the repository.

2. You should be able to pass different GAE deployables using EXTRA_ARGS:

EXTRA_ARGS: 'staging_app.yaml'

You can even go further and use Bitbucket Deployments with Deployment variables to provide different gae yaml file path depending on the deployment environment.

Let me know if you have any further questions :)