Skip to content

docs(env): document all Cloud Run env vars in .env.example - #184

Open
spashii wants to merge 1 commit into
mainfrom
docs/env-example-cloud-run-coverage
Open

docs(env): document all Cloud Run env vars in .env.example#184
spashii wants to merge 1 commit into
mainfrom
docs/env-example-cloud-run-coverage

Conversation

@spashii

@spashii spashii commented Jul 28, 2026

Copy link
Copy Markdown
Member

What

Reconciled .env.example against the deployed Cloud Run service sam (23 env vars: 11 plain + 12 Secret Manager-backed) and added the entries that were missing:

  • GITHUB_WEBHOOK_SECRET — documented in the GitHub section, with a warning that the prod value is TF-generated (infra/functions.tf random_password) so nobody should invent one locally, and that upload-secrets.sh pushes any non-empty local value as a new secret version (the key is in infra/config.yaml's mapping).
  • GIT_AUTHOR_NAME / GIT_AUTHOR_EMAIL / GIT_COMMITTER_NAME / GIT_COMMITTER_EMAIL — new "Bot git identity" block; the deploy workflow sets these on Cloud Run from infra/config.yaml, and the email must stay a verified address on the bot's GitHub account.
  • GOOGLE_GENAI_USE_VERTEXAI — set in both local and prod env but was never in the example.

Also

Refreshed the GOOGLE_CLOUD_LOCATION comment: it still said workers pin eu for residency, but both Gemini tiers pin global since #183 (EU capacity 429s, 2026-07-28).

Verification

Scripted check: every env var name on the Cloud Run service now has a matching ^VAR= line in .env.example; local .env values were verified against Cloud Run plain values and Secret Manager latest versions (by sha256) during the same reconcile pass.

🤖 Generated with Claude Code

Reconciled .env.example against the deployed Cloud Run service (23 vars:
11 plain + 12 Secret Manager-backed). Missing entries added:

- GITHUB_WEBHOOK_SECRET — with a warning that the prod value is
  TF-generated (infra/functions.tf) and that upload-secrets.sh pushes
  any non-empty local value as a new secret version
- GIT_AUTHOR_* / GIT_COMMITTER_* — bot git identity block, set on Cloud
  Run by the deploy workflow from infra/config.yaml
- GOOGLE_GENAI_USE_VERTEXAI — set in both local and prod env but never
  documented

Also refreshed the GOOGLE_CLOUD_LOCATION comment: both Gemini tiers pin
"global" since #183, the old "workers on eu" note was stale.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant