-
Features
- Cloud Source Repositories provides fully featured, private Git repositories hosted on Google Cloud
- To use a hosted Git repository with Cloud Source Repositories, users must open an account with GitHub or Bitbucket
- Cloud Source Repositories can be used for collaborative, version-controlled development
- Users of the Debugger can view debugging information alongside code during app runtime
- Users can add Cloud Source Repositories to a local Git repository as a remote, or connect it to a hosted repository on GitHub or Bitbucket
- From a local repository, users can use the standard set of Git commands to interact with the repository in the cloud, including push, pull, clone, and log
- Cloud Source Repositories are intended to store only the source code for user apps and not user or personal data
- Users can create multiple repositories for a single Google Cloud project
- Users can connect an existing GitHub or Bitbucket repository to Cloud Source Repositories
- Connected repositories are synchronized with Cloud Source Repositories automatically
- Cloud Source Repositories provides a source browser to view repository files from within the Google Cloud Console
- Cloud Source Repositories automatically send logs on repository activity to Cloud Logging to help track and troubleshoot data access
- Users can use logs to review recent repository synchronization, repository access by other users, and administrative actions such as creations, deletions, and permission changes
- Users can configure notification settings such that an alert is sent when an error is logged during a repository synchronization
- Cloud Source Repositories offer security key detection to block git push transactions that contain sensitive information
-
Notifications
- Publishes messages about repository to named resources called topics
- Apps subscribed to Pub/Sub topics can receive these messages
- Alerts can be received when repository state changes
- Can configure roles and permissions for Pub/Sub topics
- Can configure repositories to publish events to a Pub/Sub topic
- Can set the scope of the configuration to be the entire Google Cloud project or an individual repository
- Cloud Source Repositories can publish messages to a specified Pub/Sub topic using a service account
- With audit logging enabled for Pub/Sub, the service account is the caller of the Pub/Sub APIs
- Pub/Sub can notify when a user creates a repository, deletes a repository, or pushes a commit to a repository
- Each event is a specific event type
-
IAM
- Cloud Source Repositories uses Cloud IAM for access control
- Cloud IAM can be used to add team members to projects and to grant them permissions to create, view, and update repositories
- Every action on a repository in Cloud Source Repositories requires that the account initiating the action has the appropriate permissions
- Permissions are not granted to specific accounts, but roles that contains the appropriate set of permissions are assigned to members
- Permissions are assigned to accounts through the use of roles
- In addition to the predefined roles, Cloud Source Repositories supports custom roles
- In Cloud IAM, access is granted to members
- There are multiple types of members
- A Google Cloud repository cannot be made public
- Cloud Source Repositories does not support allAuthenticatedUsers and allUsers member types