nodejs-datastore: Error: Unexpected error while acquiring application default credentials: read ECONNRESET

Ah sorry just noticed this. We moved to AppEngine Flex, Go and Spanner and all our issues went away so not sure if this is an issue anymore

@ChrisBartonLC I think you might have a better handle on the status of this issue, as it stands now. Would you catch me up?

Also, thank you for the update and help, @dgadelha!

So we have two service accounts in play, one to talk to GCP resources and one downloaded from the the FB project we use.

so this is the Firebase service account right? AKA Firebase SDK?

log.info(‘Creating firebase app reference’, { context: path(‘app’), fields: { type: type } })

return secrets.secret_json(type)
  .then(service_account => {
    const app = firebase_admin.initializeApp({
      credential: firebase_admin.credential.cert(service_account),
      databaseURL: `https://${service_account.project_id}.firebaseio.com`
    }, uuid())

    _apps.set(type, app)

    return Promise.resolve(_apps.get(type))
  })

Ah unfortunately that means you will need to embed the service account which is what we do:

client = { datastore: require(‘google-cloud/datastore’)({ credentials: service_account }) }

We actually encrypt our service account with Cloud KMS but I guess you could just include the json in your function as long as your don’t accidentally commit it.

Another option is to temp deploy to Appengine Flex (see below). I though that would be a lot of work but it turned out to be really easy.

---

app.yaml

service: lc-api-product
runtime: nodejs
env: flex

automatic_scaling:
  min_num_instances: 1
  max_num_instances: 1

---

---

app.js

const express = require('express')

const api = express()

const api_port = process.env.PORT || 8080

api.listen(api_port, () => {
  console.log('App listening', { api_port: api_port })
})

api.get('/', (req, res) => {
  console.log('ENTER api_product')

  res.status(200).send('Hello, world!').end()
})

api.get('/product/v1/brands', (req, res) => {
  console.log('ENTER api_product_brands')

  require('./api/product/brands/do').invoke(req, res)
})

---

@dgadelha FYI is case you don’t know (or anyone else viewing this), you can pin to these versions as a workaround:

“google-cloud/datastore”: “1.1.0”, “google-cloud/pubsub”: “0.14.0”,

@dgadelha if you are not already a member of the cloud-functions-beta-testers group I recommend you join because there is more up-to-date information of this issue there, see “PubSub subscription stops delivering messages to CloudFunction” which covers both datastore and pubsub, basically it is now reproducible and so no doubt will be fixed in time.