buildbucket has 403 responses: https://pantheon.corp.google.com/logs?project=cr-buildbucket&key1=default&service=appengine.googleapis.com&key2=3841-37085e6&logName=appengine.googleapis.com%2Frequest_log&minLogLevel=400&expandAll=false&filters=status:403&lastVisibleTimestampNanos=1461110031435832000 but there are no 403s in the metrics for some reason: http://shortn/_R9jPCB4tgt Buildbucket endpoints are instrumented in a very straightforward way https://codereview.chromium.org/1893233003/
Does the authorization happen in the request code, or somewhere in the AppEngine layer? I vaguely remember Cloud Endpoints do lots of processing outside of app code.
The problem was in the instrumentation code https://codereview.chromium.org/1903653002/
The following revision refers to this bug: https://chromium.googlesource.com/infra/infra.git/+/bcf60c35f3573f44eea7f20b8da24f20a0572c49 commit bcf60c35f3573f44eea7f20b8da24f20a0572c49 Author: nodir <nodir@chromium.org> Date: Wed Apr 20 15:52:06 2016 buildbucket: fix instrumentation Make ts mon instrumentation top-level instrumentation TBR=sergeyberezin@chromium.org BUG= 604947 Review URL: https://codereview.chromium.org/1903653002 [modify] https://crrev.com/bcf60c35f3573f44eea7f20b8da24f20a0572c49/appengine/cr-buildbucket/api.py [modify] https://crrev.com/bcf60c35f3573f44eea7f20b8da24f20a0572c49/appengine/cr-buildbucket/test/api_test.py
Comment 1 by sergeybe...@chromium.org
, Apr 20 2016