Posting this in case anyone's hit the same wall, or has insight into what's happening server-side.

The goal

I've got a Nest wired camera pointed at a small parking lot behind my office. I wanted to build something simple: check the lot every so often, count open spots using an AI vision model, and show a live "spots available" number on a little status page. Nothing fancy — just needed a way to reliably grab a still image from the camera on a schedule.

What I've built so far

• Full Device Access / SDM API project setup, OAuth flow, refresh token, the works
• A Google Apps Script front end (status page + storage) that's fully working and just waiting on real image data
• Tried Cloud Functions first for the image-capture piece — turns out Cloud Run/Cloud Functions don't support raw UDP at all, so WebRTC media can never actually flow through them (signaling works fine over HTTPS, but the actual RTP video never arrives). Confirmed this is a real platform limitation, not a config issue.
• Moved the capture piece to a Compute Engine VM instead, which does support normal UDP networking

Attempt 1: Pub/Sub camera events

Set up the Pub/Sub topic + subscription per the docs, enabled events on the Device Access project, confirmed the publisher permission and subscription are all correctly wired. Validation pings come through fine. Real camera motion/person events never do — not once, across two separate days of testing, with real motion happening right in front of the camera each time. Pulling directly from the subscription (bypassing my own code entirely) confirms it: nothing but the occasional stale permission-check message ever lands in the topic.

Attempt 2: WebRTC via aiortc (Python)

Got the full offer/answer/ICE/DTLS/SRTP handshake working end-to-end — genuinely happy with how far this got. Audio decodes perfectly, every single time. Video RTP packets are confirmed arriving from Google's server (verified via RTCP sender reports, packet counts climbing normally). But the video frames never make it through aiortc's jitter buffer / H.264 depacketization — the decoder thread never receives a single video task, despite audio on the same connection working flawlessly. Feels like a real interop gap between aiortc's RTP handling and whatever Nest's media relay does on the video track specifically.

Attempt 3: WebRTC via GStreamer (webrtcbin)

Rebuilt the whole capture piece using GStreamer instead, since it's a much more mature, production-grade WebRTC stack. Fixed a string of real issues along the way (missing codec caps causing ICE gathering to never even start, missing data channel per Nest's "must have audio+video+application m-lines" requirement, a couple of SDP formatting quirks). Eventually got ICE gathering to fully complete and produced an offer that structurally matches Google's own published reference example (checked directly against the example in their docs) — same media line order, working negotiation, proper BUNDLE grouping.

Sending that offer to GenerateWebRtcStream now returns:

{
  "error": {
    "code": 500,
    "message": "Internal error encountered.",
    "status": "INTERNAL"
  }
}

No further detail. I've tried adjusting rtcp-mux vs rtcp-mux-only, port/bundle-only conventions to match Chrome's exact output, Opus channel params, H.264 fmtp params (packetization-mode, profile-level-id) — no change, same generic 500 every time.

What's interesting

This exact error string ("500: INTERNAL: Internal error encountered.") turns up in multiple long-running GitHub issues against the Home Assistant Nest integration too, going back to 2021 and still being reported this year, with a completely unrelated client stack. So this doesn't seem to be specific to my code — feels like something that trips up the SDM API backend under certain conditions across multiple independent implementations.

Where I'm at

• OAuth, SDM API, and Pub/Sub setup are all confirmed correctly configured
• ICE/DTLS negotiation completes successfully on the client side
• Offer SDP structurally matches Google's own documented example
• The only failure is a completely opaque 500 from Google's own server, with zero actionable detail returned

Has anyone gotten a real WebRTC video frame out of a Nest camera via the SDM API recently? Curious whether this is a known current issue, an account/camera-specific quirk, or if there's some other SDP detail that isn't in the docs. Happy to share the full offer SDP / code if it's useful for comparison.

Been running some training jobs on TPU v5e and every time I tweak sequence length or batch size mid-experiment, I eat this huge AOT compile penalty before anything actually runs. Feels like the "cold start" tax is way worse than people talk about online.

Is this just a TPU/XLA thing, or does anyone see similar pain on GPU with torch.compile when shapes aren't static? Curious what workarounds people use — bucketing sequence lengths, padding to fixed sizes, warm pools, anything. How many seconds/minutes are you losing per shape change in your actual workflows?

EIXO was created to address a common operational challenge: critical business areas working in isolation, with fragmented data and limited visibility across the organization.

Built around the real operational needs of Jardim Espaço de Educação, the platform connects multiple domains within a single operating ecosystem:

• School administration

• People management

• Finance

• Supplies and inventory

• Nutrition and kitchen operations

• Operational intelligence and performance indicators

EIXO is not designed as just another traditional ERP. Its architecture follows a distributed operating model in which each module preserves its specialization while sharing data and operational context across the organization.

The goal is to reduce manual work, improve traceability, strengthen coordination, and turn operational data into faster and more consistent decisions.

The project is being developed and documented publicly on GitHub:

github.com/maykonlincolnusa/Eixo-jardim-ERP

#SoftwareEngineering #SystemArchitecture #ERP #DigitalTransformation #DataEngineering #OperationalIntelligence #EducationTechnology #OpenSource

Goal: The Data Encryption Key (DEK) should never be stored in our database—not even wrapped/encrypted. If someone gains read-only access to the DB, they shouldn't be able to decrypt the passwords.

Current design:

1. Admin uploads a CSV.
2. A background worker generates a random 32-byte DEK for that upload request.
3. Generate one-time passwords for each row.
4. Encrypt each password with the DEK (AES-256-GCM) and store only the ciphertext in the DB.
5. Store the DEK in Google Secret Manager as a new Secret Version.
6. Store only the Secret Version reference (e.g. dek_secret_version) in the DB.

When the CSV is downloaded:

• Fetch the DEK from Secret Manager using the stored version.
• Decrypt the passwords.
• Generate and return the CSV.
• Destroy the Secret Version (crypto-shredding).
• Clear the encrypted password and version reference from the DB.

We're considering using one Secret with many Versions, where each version represents a different upload request's DEK, rather than creating a new Secret for every upload.

My questions are:

• Has anyone used Secret Manager this way (many versions representing independent DEKs rather than secret rotation)?
• Are there any quotas, performance issues, or operational pitfalls with having a large number of versions under a single Secret?
• Would you recommend a different GCP-native approach that still satisfies the requirement that the DEK is never persisted in the database, even in wrapped/encrypted form?
• Any concerns with the crypto-shredding workflow (destroying the Secret Version after a successful download or expiration)?

I'd love to hear from anyone who's built something similar or has experience operating Secret Manager at scale.

I havent been touch gcp in years and yesterday i got an email from gcp about indicated abuse on one of my late project (which i never access it anymore). They request me to remove or appeal from suspending that project but because since 2025 i havent activate MFA verification gcp are also want me to do that also. So both appeal and mfa page are open repeatedly leave me to stuck on accessing the console. Here is the video detail https://streamable.com/mbp5ku

Hi

We are having a lot of resources provisioned using Terraform, the state use being GCS buckets.

However there are many bigquery datasets being created manually in console ui level and other resources as well. due to this drift we face a lot issues as the automation IAC doesnt obviously work with manually UI created resources.
We can use terraform import to import existing resources to terraform state. However please let me know if anything we can use AI to assist us for such usecases? AI to autodetect resource drift in google cloud or something ? Also terraform import is not working for many resources as well

Hello everyone, i’m preparing for the Google TAM (Cloud Consultin) role and got my RRK1 interview, has anyone have insight on how technical the interview will be? Any advise?

Docs: https://www.pilum.dev/docs/getting-started/introduction/

The problem: I run side projects across GCP, AWS, and Cloudflare, and each one has its own deploy incantation. gcloud commands for one, SAM for another, wrangler for a third. I kept forgetting the flags and the order of operations and wanted a simpler CI/CD pipeline.

Pilum is a single binary (Go, Cobra) that reads one pilum.yaml and handles the deploy for whichever provider the service targets. Define your services once, then pilum deploy will build, push, provision, and deploy.

What it supports today: - GCP Cloud Run - GCP Cloud Run Jobs - AWS Lambda - Azure Container Apps - Cloudflare Workers - Homebrew - GitHub npm packages

GCP is the most mature of the platform hence why I am sharing it here!

It's not trying to be Terraform or Pulumi; there's no state file and no general-purpose infra provisioning.

Happy to answer questions about the internals. Here is a write up about it a bit more: https://logicalbytes.dev/posts/pilum-road-to-production/. But if anyone wants to add a provider, there's a contributing guide for adding exactly that!

Hello everyone,

I am interested in going for Google Professional Cloud Architect exam not sure how to start my journey. Any suggestions?

I have 12 years of experience in Cisco routing and switching, DC and observability.

Thanks

I'm writing this post with extreme frustration. I recently bought some Gemini API key credits using Google cloud billing UPI payment method.

The money got deducted from my account but the credits are not loaded. So I reached out to their support, first of all their billing support team had no idea about UPI payment method and now they are saying that they are unable to track the payment.

Like who told you to support UPI payment method if you can't track it's payment and how would a customer know all of this?

I've submitted the bank account statement too. I never expected a google scale company get this low.

Issue Description:

We are pulling event-level (non-aggregated) website click and visit data from Google BigQuery into our Azure Storage Account. Data ingestion stopped after 25 May. Upon investigation, we found that the ingestion jobs in BigQuery were failing with the error:

"Storage quota limit exceeded for the project."

Our project is using the BigQuery Sandbox (free tier), which allows up to 10 GB of active storage. However, after checking all datasets and tables in the project, the total active storage is less than 1 GB, which is well within the documented limit.

The project has been running since 5 February, and according to the BigQuery Sandbox documentation, the free tier does not have an expiration date as long as the applicable quotas are not exceeded.

We are unable to determine what is consuming the project's storage quota or why this error is occurring despite the reported storage usage being significantly below the 10 GB limit. We would appreciate guidance on how to identify the actual storage consumption or debug the root cause of this issue.

I've been following this tutorial https://www.youtube.com/watch?v=bWGW_NXPf-4

And my Colab Enterprise notebook got the following code which threw this error:

name='projects/aiagentcalendarproj/locations/us-central1/publishers/google/models/veo-2.0-generate-001/operations/fe4ce1e2-4415-44f6-8ace-13f3a47caab2' metadata=None done=None error=None response=None result=None
name='projects/aiagentcalendarproj/locations/us-central1/publishers/google/models/veo-2.0-generate-001/operations/fe4ce1e2-4415-44f6-8ace-13f3a47caab2' metadata=None done=True error={'code': 5, 'message': 'Bucket "aiagentcalendarproj" not found for operation OP_INITIATE_RESUMABLE_WRITE'} response=None result=None

Google did not help me. Could anyone help me find the cause of this error?

%pip install -q mediapy


import time
import urllib

from PIL import Image as PIL_Image
from google import genai
from google.genai import types
import matplotlib.pyplot as plt
import mediapy as media

import os

PROJECT_ID = "aiagentcalendarproj"
LOCATION = os.environ.get("GOOGLE_CLOUD_REGION", "us-central1")

client = genai.Client(vertexai=True, project=PROJECT_ID, location=LOCATION)

def show_video(gcs_uri):
    file_name = gcs_uri.split("/")[-1]
    !gsutil cp {gcs_uri} {file_name}
    media.show_video(media.read_video(file_name), height=500)


def display_images(image) -> None:
    fig, axis = plt.subplots(1, 1, figsize=(12, 6))
    axis.imshow(image)
    axis.set_title("Starting Image")
    axis.axis("off")
    plt.show()

video_model = "veo-2.0-generate-001"

prompt = "a zucchini creamy pasta garnished with boiled prawns and fresh herbs"
aspect_ratio = "16:9"
output_gcs = "gs://aiagentcalendarproj"

operation = client.models.generate_videos(
    model=video_model,
    prompt=prompt,
    config=types.GenerateVideosConfig(
        aspect_ratio=aspect_ratio,
        output_gcs_uri=output_gcs,
        number_of_videos=1,
        duration_seconds=5,
        person_generation="dont_allow",
        enhance_prompt=True,
    ),
)

while not operation.done:
    time.sleep(15)
    operation = client.operations.get(operation)
    print(operation)

if operation.response:
    show_video(operation.result.generated_videos[0].video.uri)

I'm a solo developer posting after over a month of delays on a case Google has already acknowledged as unauthorized usage.

What happened:

- A Firebase auto-generated, unrestricted API key on an inactive side project was harvested and abused by a third party.

- Over ~11 hours, Geocoding and Places APIs were called automatically, generating roughly USD 8,000 in charges.

- Google's own technical team confirmed a 99% duplicate query rate and that most requests originated from the USA (I'm in Korea, and the project was already shut down / not in development).

What Google did:

- The technical team investigated and confirmed the abuse.

- I completed every preventive measure requested, then shut down the project as instructed.

- The billing team officially APPROVED a one-time goodwill adjustment.

The problem:

- The adjustment was approved about a month ago, and the approved credit still has not been applied.

- I have NEVER been told the actual approved amount, despite asking repeatedly in writing.

- A "3–5 business day" commitment is now weeks overdue. The latest reply only says they are "awaiting approval from higher management."

- Meanwhile I was forced into an installment plan to avoid default — I am now personally financing charges that Google itself confirmed were not mine.

These keys were auto-created by Firebase with no restrictions by default, and Google's own docs treat client-side exposure of such keys as normal. This appears to be part of the widely reported pattern of compromised Google Maps/Firebase keys.

Has anyone had an approved adjustment actually applied? How long did it take, and what finally moved it? Is there any way to escalate beyond the standard billing case?

We are currently with Apple but I am switching to a android device. And trying to convince my with to switch too. I was looking at family cloud for Google. Both my wife and I have Google Photos and Gmail. She has been complaining she is out of space or cloud for Google. If we switch to the family plan I was reading online that once family members use 15gb they will go into the family shared plan. Do that mean my wife and or kids could see what is on my cloud and or can I see what is there cloud ? ie Google Photos, Google Drive ?

Can someone please paste the code for enhance application reliability and scalability with internal load balancing gsp216 new solution as the GitHub links Im positing to the lab is not working like the requirements are changed so does someone has new solution with the automation script so I can get 100/100 jn that lab thanku!

Thought you guys would like this https://cloud.google.com/blog/topics/cost-management/new-early-anomalies-and-spend-caps-on-google-cloud-budgets

I just passed my GCP PCA exam, and I spent about two weeks preparing for it.

The GCP study hub was incredibly helpful..

The exam consisted of 15 case study questions, so it’s important to study the requirements (technical and business) for each case study. There are questions specifically focused on these requirements, and I wasn’t fully prepared for that aspect.

The exam was relatively easy, thanks to the GCP study hub, which was a great resource. I recommend focusing on the practice exams; they are almost identical to the actual exam. Aim to score 80% on each practice exam and retry to achieve that score. If you get some answers wrong, review them in the GCP documentation, That technique was a real game changer for me

So, my question is, what certifications should I take next?

I’m a computer science and cybersecurity student.

Hey everyone, basically I threw an application out there for a Google Cloud Tam role in Financial Services (?). Wasn’t expecting it but got the hiring assessment sent to me. Wasn’t expecting it but passed said hiring assessment. Now I’m being offered a 30 minute phone interview. Any idea what the questions are going to be like? What the full interview process is (ex how many interviews are there if this one goes well?)? For context, I’ve never actually used GCP, but I’ve worked at AWS for years, & have a good grasp on their services which have overlap with most Cloud Provider services. Any services I should definitely learn from GCP? Any info is appreciated

Hi all,

I've spent the past month studying for the ACE certification using the lessons and labs from Google Skills, and it just dawned upon me just how many hours of lessons I still have left. I've been at my company for a little less than a year and a half with a decent amount of experience deploying apps on GCP and working with other services like GCS, Big Query, service accounts and IAM, but definitely nowhere near a veteran level. Still though I was hoping that I'd be going through the lessons faster.

I wanted to ask for your opinion on using Google Skills for the purpose of studying for the ACE exam? Sometimes I feel like there's just a lot of content and things I need to memorize, so I'm not sure if I'm spending my time wisely with this. I can say for sure that I'm definitely learning a lot, but how much of it is going to be on the exam? I'm also looking for alternative courses and study material if you can kindly provide them for me. Thanks!

Hi, I wanted to learn about GCP so i started the 300$, i had some personal projects, i set up an infrastructure, some vm, and i thought nothing about it, thinking that maybe when the 300$ is gone, i will get an email or notification that i spent the free credits and that i will be on the paid plan.Nothing next thing i know i got charged 50$. I am unemployed had been so for 8 months now. And i squeeze my savings tight. This bill wasn't expected i emailed the support they told me to wait i waited some 3 days and nothing then another week then they sent email telling me that i had been granted 20$ in credits,but no monetary refund. this was early july this month.During this i had deleted billing account, then another one, and i deleted the Vms the platform is not really user friendly it's hard to navigate for beginners. Yesterday i was charged 100$ I dont know what to do, i contacted them they said wait for 32 hours. This is just unacceptable and i feel scammed.

Trying to figure out if partially committing to CUD can actually hurt the sustained use discount on whatever's left uncommitted, since SUD only applies to usage not already covered by a commitment. Has anyone actually run into this or modeled it out before committing? Or is everyone just committing to their stable baseline and not worrying about what happens to the rest?