google / nomulus

Top-level domain name registry service on Google Cloud Platform

Home Page:https://registry.google

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Outdated Documentation - Cloud SecretManager

lancelotnd opened this issue · comments

While trying to deploy the project for the first time, I can't seem to go past the CloudSecretManager config step from the configuration.md file.

For instance, when I run the command listed in the documentation:

$ set ENV=alpha
$ nomulus -e $ENV update_keyring_secret --keyname CLOUD_SQL_PASSWORD \
--input /tmp/server.pass

I get the following error:

 $nomulus -e alpha update_keyring_secret --keyname CLOUD_SQL_PASSWORD --input /tmp/server.pass
Update values of secret in the keyring.
Usage: update_keyring_secret [options]
  Options:
    --input
      Name of input file for key data.
  * --keyname
      The secret to update
      Possible Values: [BRDA_RECEIVER_PUBLIC_KEY, BRDA_SIGNING_KEY_PAIR, BRDA_SIGNING_PUBLIC_KEY, ICANN_REPORTING_PASSWORD, JSON_CREDENTIAL, MARKSDB_DNL_LOGIN_AND_PASSWORD, MARKSDB_LORDN_PASSWORD, MARKSDB_SMDRL_LOGIN_AND_PASSWORD, RDE_RECEIVER_PUBLIC_KEY, RDE_SIGNING_KEY_PAIR, RDE_SIGNING_PUBLIC_KEY, RDE_SSH_CLIENT_PRIVATE_KEY, RDE_SSH_CLIENT_PUBLIC_KEY, RDE_STAGING_KEY_PAIR, RDE_STAGING_PUBLIC_KEY, SAFE_BROWSING_API_KEY]

Exception in thread "main" com.beust.jcommander.ParameterException: Invalid value for --keyname parameter. Allowed values:[BRDA_RECEIVER_PUBLIC_KEY, BRDA_SIGNING_KEY_PAIR, BRDA_SIGNING_PUBLIC_KEY, ICANN_REPORTING_PASSWORD, JSON_CREDENTIAL, MARKSDB_DNL_LOGIN_AND_PASSWORD, MARKSDB_LORDN_PASSWORD, MARKSDB_SMDRL_LOGIN_AND_PASSWORD, RDE_RECEIVER_PUBLIC_KEY, RDE_SIGNING_KEY_PAIR, RDE_SIGNING_PUBLIC_KEY, RDE_SSH_CLIENT_PRIVATE_KEY, RDE_SSH_CLIENT_PUBLIC_KEY, RDE_STAGING_KEY_PAIR, RDE_STAGING_PUBLIC_KEY, SAFE_BROWSING_API_KEY]
	at com.beust.jcommander.converters.EnumConverter.convert(EnumConverter.java:38)
	at com.beust.jcommander.converters.EnumConverter.convert(EnumConverter.java:13)
	at com.beust.jcommander.JCommander.convertValue(JCommander.java:1239)
	at com.beust.jcommander.ParameterDescription.addValue(ParameterDescription.java:243)
	at com.beust.jcommander.JCommander.processFixedArity(JCommander.java:816)
	at com.beust.jcommander.JCommander.processFixedArity(JCommander.java:798)
	at com.beust.jcommander.JCommander.parseValues(JCommander.java:671)
	at com.beust.jcommander.JCommander.parse(JCommander.java:311)
	at com.beust.jcommander.JCommander.parseValues(JCommander.java:737)
	at com.beust.jcommander.JCommander.parse(JCommander.java:311)
	at com.beust.jcommander.JCommander.parse(JCommander.java:294)
	at google.registry.tools.RegistryCli.run(RegistryCli.java:132)
	at google.registry.tools.RegistryTool.main(RegistryTool.java:123)

It appears that the keyname CLOUD_SQL_PASSWORD is not one of the listed keys which prevents me from running the command. I tried manually adding the key and value the GCP GUI but this key doesnt seem to be used anymore.

When trying to access the deployed app at /registrar, i get the following error. 'secretmanager.versions.access' denied for resource 'projects/REDACTED-PROJECT-ID/secrets/sql-cred-live-label-nomulus-nomulus/versions/latest' (or it may not exist). and I'm just not sure what this key sql-cred-live-label-nomulus-nomulus is referring to as there is no mention of it elsewhere.

com.google.monitoring.metrics.MetricExporter run: Started up MetricExporter

google.registry.module.ServletBase service: Received FrontendServlet request.

google.registry.request.auth.RequestAuthenticator authorize: Action requires auth: AuthSettings{methods=[INTERNAL, API, LEGACY], minimumLevel=NONE, userPolicy=PUBLIC}

google.registry.request.auth.RequestAuthenticator authenticate: Authenticated via legacy auth: AuthResult{authLevel=USER, userAuthInfo=Optional[UserAuthInfo{appEngineUser=Optional[REDACTED.EMAIL@gmail.com], isUserAdmin=true, consoleUser=Optional.empty, oauthTokenInfo=Optional.empty}]}

com.google.monitoring.metrics.MetricRegistryImpl newIncrementableMetric: Registered new counter: /console/registrar/console_requests

com.google.monitoring.metrics.MetricRegistryImpl newIncrementableMetric: Registered new counter: /console/registrar/setting_requests

google.registry.request.auth.AuthenticatedRegistrarAccessor createRoleMap: Checking registrar contacts for user ID REDACTED.EMAIL@gmail.com.

google.registry.persistence.PersistenceModule setSqlCredential: Failed to get SQL credential from Secret Manager.
google.registry.privileges.secretmanager.SecretManagerClient$SecretManagerException: com.google.api.gax.rpc.PermissionDeniedException: io.grpc.StatusRuntimeException: PERMISSION_DENIED: Permission 'secretmanager.versions.access' denied for resource 'projects/REDACTED-PROJECT-ID/secrets/sql-cred-live-label-nomulus-nomulus/versions/latest' (or it may not exist).
	at google.registry.privileges.secretmanager.SecretManagerClientImpl.callSecretManager(SecretManagerClientImpl.java:173)
	at google.registry.privileges.secretmanager.SecretManagerClientImpl.getSecretData(SecretManagerClientImpl.java:119)
	at google.registry.privileges.secretmanager.SqlCredentialStore.getLiveCredentialSecretVersion(SqlCredentialStore.java:94)
	at google.registry.privileges.secretmanager.SqlCredentialStore.getCredential(SqlCredentialStore.java:52)
	at google.registry.persistence.PersistenceModule.setSqlCredential(PersistenceModule.java:321)
	at google.registry.persistence.PersistenceModule.provideAppEngineJpaTm(PersistenceModule.java:232)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.provideAppEngineJpaTm(PersistenceModule_ProvideAppEngineJpaTmFactory.java:59)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.get(PersistenceModule_ProvideAppEngineJpaTmFactory.java:47)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.get(PersistenceModule_ProvideAppEngineJpaTmFactory.java:15)
	at dagger.internal.DoubleCheck.get(DoubleCheck.java:47)
	at google.registry.persistence.DaggerPersistenceComponent$PersistenceComponentImpl.appEngineJpaTransactionManager(DaggerPersistenceComponent.java:140)
	at google.registry.persistence.transaction.TransactionManagerFactory.createJpaTransactionManager(TransactionManagerFactory.java:47)
	at com.google.common.base.Suppliers$NonSerializableMemoizingSupplier.get(Suppliers.java:183)
	at google.registry.persistence.transaction.TransactionManagerFactory.tm(TransactionManagerFactory.java:81)
	at google.registry.request.auth.AuthenticatedRegistrarAccessor.createRoleMap(AuthenticatedRegistrarAccessor.java:313)
	at google.registry.request.auth.AuthenticatedRegistrarAccessor.<init>(AuthenticatedRegistrarAccessor.java:116)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.authenticatedRegistrarAccessor(DaggerFrontendComponent.java:1412)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.injectConsoleUiAction(DaggerFrontendComponent.java:1668)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.consoleUiAction(DaggerFrontendComponent.java:1563)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at google.registry.request.Router.lambda$newInstantiator$0(Router.java:100)
	at google.registry.request.RequestHandler.handleRequest(RequestHandler.java:157)
	at google.registry.module.ServletBase.service(ServletBase.java:78)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
	at org.eclipse.jetty.servlet.ServletHolder$NotAsync.service(ServletHolder.java:1459)
	at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799)
	at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1656)
	at com.google.apphosting.utils.servlet.JdbcMySqlConnectionCleanupFilter.doFilter(JdbcMySqlConnectionCleanupFilter.java:78)
	at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
	at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1626)
	at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:552)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
	at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:571)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
	at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at com.google.apphosting.runtime.jetty9.ParseBlobUploadHandler.handle(ParseBlobUploadHandler.java:124)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
	at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1440)
	at com.google.apphosting.runtime.jetty94.AppEngineWebAppContext.doHandle(AppEngineWebAppContext.java:289)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188)
	at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:505)
	at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186)
	at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1355)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
	at com.google.apphosting.runtime.jetty94.AppVersionHandlerMap.handle(AppVersionHandlerMap.java:113)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at com.google.apphosting.runtime.jetty94.SizeLimitHandler.handle(SizeLimitHandler.java:94)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.Server.handle(Server.java:516)
	at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:487)
	at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:732)
	at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:479)
	at com.google.apphosting.runtime.jetty94.RpcConnection.handle(RpcConnection.java:269)
	at com.google.apphosting.runtime.jetty94.RpcConnector.serviceRequest(RpcConnector.java:99)
	at com.google.apphosting.runtime.jetty94.JettyServletEngineAdapter.serviceRequest(JettyServletEngineAdapter.java:179)
	at com.google.apphosting.runtime.RequestRunner.dispatchServletRequest(RequestRunner.java:264)
	at com.google.apphosting.runtime.RequestRunner.dispatchRequest(RequestRunner.java:229)
	at com.google.apphosting.runtime.RequestRunner.run(RequestRunner.java:194)
	at com.google.apphosting.runtime.ThreadGroupPool$PoolEntry.run(ThreadGroupPool.java:273)
	at java.lang.Thread.run(Thread.java:750)
Caused by: com.google.api.gax.rpc.PermissionDeniedException: io.grpc.StatusRuntimeException: PERMISSION_DENIED: Permission 'secretmanager.versions.access' denied for resource 'projects/REDACTED-PROJECT-ID/secrets/sql-cred-live-label-nomulus-nomulus/versions/latest' (or it may not exist).
	at com.google.api.gax.rpc.ApiExceptionFactory.createException(ApiExceptionFactory.java:98)
	at com.google.api.gax.rpc.ApiExceptionFactory.createException(ApiExceptionFactory.java:41)
	at com.google.api.gax.grpc.GrpcApiExceptionFactory.create(GrpcApiExceptionFactory.java:86)
	at com.google.api.gax.grpc.GrpcApiExceptionFactory.create(GrpcApiExceptionFactory.java:66)
	at com.google.api.gax.grpc.GrpcExceptionCallable$ExceptionTransformingFuture.onFailure(GrpcExceptionCallable.java:97)
	at com.google.api.core.ApiFutures$1.onFailure(ApiFutures.java:67)
	at com.google.common.util.concurrent.Futures$CallbackListener.run(Futures.java:1132)
	at com.google.common.util.concurrent.DirectExecutor.execute(DirectExecutor.java:31)
	at com.google.common.util.concurrent.AbstractFuture.executeListener(AbstractFuture.java:1270)
	at com.google.common.util.concurrent.AbstractFuture.complete(AbstractFuture.java:1038)
	at com.google.common.util.concurrent.AbstractFuture.setException(AbstractFuture.java:808)
	at io.grpc.stub.ClientCalls$GrpcFuture.setException(ClientCalls.java:574)
	at io.grpc.stub.ClientCalls$UnaryStreamToFuture.onClose(ClientCalls.java:544)
	at io.grpc.PartialForwardingClientCallListener.onClose(PartialForwardingClientCallListener.java:39)
	at io.grpc.ForwardingClientCallListener.onClose(ForwardingClientCallListener.java:23)
	at io.grpc.ForwardingClientCallListener$SimpleForwardingClientCallListener.onClose(ForwardingClientCallListener.java:40)
	at com.google.api.gax.grpc.ChannelPool$ReleasingClientCall$1.onClose(ChannelPool.java:535)
	at io.grpc.PartialForwardingClientCallListener.onClose(PartialForwardingClientCallListener.java:39)
	at io.grpc.ForwardingClientCallListener.onClose(ForwardingClientCallListener.java:23)
	at io.grpc.ForwardingClientCallListener$SimpleForwardingClientCallListener.onClose(ForwardingClientCallListener.java:40)
	at io.grpc.census.CensusStatsModule$StatsClientInterceptor$1$1.onClose(CensusStatsModule.java:802)
	at io.grpc.PartialForwardingClientCallListener.onClose(PartialForwardingClientCallListener.java:39)
	at io.grpc.ForwardingClientCallListener.onClose(ForwardingClientCallListener.java:23)
	at io.grpc.ForwardingClientCallListener$SimpleForwardingClientCallListener.onClose(ForwardingClientCallListener.java:40)
	at io.grpc.census.CensusTracingModule$TracingClientInterceptor$1$1.onClose(CensusTracingModule.java:436)
	at io.grpc.internal.DelayedClientCall$DelayedListener$3.run(DelayedClientCall.java:471)
	at io.grpc.internal.DelayedClientCall$DelayedListener.delayOrExecute(DelayedClientCall.java:435)
	at io.grpc.internal.DelayedClientCall$DelayedListener.onClose(DelayedClientCall.java:468)
	at io.grpc.internal.ClientCallImpl.closeObserver(ClientCallImpl.java:563)
	at io.grpc.internal.ClientCallImpl.access$300(ClientCallImpl.java:70)
	at io.grpc.internal.ClientCallImpl$ClientStreamListenerImpl$1StreamClosed.runInternal(ClientCallImpl.java:744)
	at io.grpc.internal.ClientCallImpl$ClientStreamListenerImpl$1StreamClosed.runInContext(ClientCallImpl.java:723)
	at io.grpc.internal.ContextRunnable.run(ContextRunnable.java:37)
	at io.grpc.internal.SerializingExecutor.run(SerializingExecutor.java:133)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	... 1 more
	Suppressed: com.google.api.gax.rpc.AsyncTaskException: Asynchronous task failed
		at com.google.api.gax.rpc.ApiExceptions.callAndTranslateApiException(ApiExceptions.java:57)
		at com.google.api.gax.rpc.UnaryCallable.call(UnaryCallable.java:112)
		at com.google.cloud.secretmanager.v1.SecretManagerServiceClient.accessSecretVersion(SecretManagerServiceClient.java:1396)
		at com.google.cloud.secretmanager.v1.SecretManagerServiceClient.accessSecretVersion(SecretManagerServiceClient.java:1326)
		at google.registry.privileges.secretmanager.SecretManagerClientImpl.lambda$getSecretData$8(SecretManagerClientImpl.java:122)
		at google.registry.util.Retrier.callWithRetry(Retrier.java:153)
		at google.registry.util.Retrier.callWithRetry(Retrier.java:74)
		at google.registry.privileges.secretmanager.SecretManagerClientImpl.callSecretManager(SecretManagerClientImpl.java:165)
		at google.registry.privileges.secretmanager.SecretManagerClientImpl.getSecretData(SecretManagerClientImpl.java:119)
		at google.registry.privileges.secretmanager.SqlCredentialStore.getLiveCredentialSecretVersion(SqlCredentialStore.java:94)
		at google.registry.privileges.secretmanager.SqlCredentialStore.getCredential(SqlCredentialStore.java:52)
		at google.registry.persistence.PersistenceModule.setSqlCredential(PersistenceModule.java:321)
		at google.registry.persistence.PersistenceModule.provideAppEngineJpaTm(PersistenceModule.java:232)
		at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.provideAppEngineJpaTm(PersistenceModule_ProvideAppEngineJpaTmFactory.java:59)
		at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.get(PersistenceModule_ProvideAppEngineJpaTmFactory.java:47)
		at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.get(PersistenceModule_ProvideAppEngineJpaTmFactory.java:15)
		at dagger.internal.DoubleCheck.get(DoubleCheck.java:47)
		at google.registry.persistence.DaggerPersistenceComponent$PersistenceComponentImpl.appEngineJpaTransactionManager(DaggerPersistenceComponent.java:140)
		at google.registry.persistence.transaction.TransactionManagerFactory.createJpaTransactionManager(TransactionManagerFactory.java:47)
		at com.google.common.base.Suppliers$NonSerializableMemoizingSupplier.get(Suppliers.java:183)
		at google.registry.persistence.transaction.TransactionManagerFactory.tm(TransactionManagerFactory.java:81)
		at google.registry.request.auth.AuthenticatedRegistrarAccessor.createRoleMap(AuthenticatedRegistrarAccessor.java:313)
		at google.registry.request.auth.AuthenticatedRegistrarAccessor.<init>(AuthenticatedRegistrarAccessor.java:116)
		at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.authenticatedRegistrarAccessor(DaggerFrontendComponent.java:1412)
		at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.injectConsoleUiAction(DaggerFrontendComponent.java:1668)
		at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.consoleUiAction(DaggerFrontendComponent.java:1563)
		at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
		at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
		at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
		at java.lang.reflect.Method.invoke(Method.java:498)
		at google.registry.request.Router.lambda$newInstantiator$0(Router.java:100)
		at google.registry.request.RequestHandler.handleRequest(RequestHandler.java:157)
		at google.registry.module.ServletBase.service(ServletBase.java:78)
		at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
		at org.eclipse.jetty.servlet.ServletHolder$NotAsync.service(ServletHolder.java:1459)
		at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799)
		at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1656)
		at com.google.apphosting.utils.servlet.JdbcMySqlConnectionCleanupFilter.doFilter(JdbcMySqlConnectionCleanupFilter.java:78)
		at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
		at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1626)
		at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:552)
		at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
		at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:571)
		at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
		at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
		at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624)
		at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
		at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
		at com.google.apphosting.runtime.jetty9.ParseBlobUploadHandler.handle(ParseBlobUploadHandler.java:124)
		at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
		at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
		at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1440)
		at com.google.apphosting.runtime.jetty94.AppEngineWebAppContext.doHandle(AppEngineWebAppContext.java:289)
		at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188)
		at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:505)
		at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594)
		at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186)
		at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1355)
<continued in next message>
<continued from previous message>
		at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
		at com.google.apphosting.runtime.jetty94.AppVersionHandlerMap.handle(AppVersionHandlerMap.java:113)
		at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
		at com.google.apphosting.runtime.jetty94.SizeLimitHandler.handle(SizeLimitHandler.java:94)
		at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
		at org.eclipse.jetty.server.Server.handle(Server.java:516)
		at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:487)
		at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:732)
		at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:479)
		at com.google.apphosting.runtime.jetty94.RpcConnection.handle(RpcConnection.java:269)
		at com.google.apphosting.runtime.jetty94.RpcConnector.serviceRequest(RpcConnector.java:99)
		at com.google.apphosting.runtime.jetty94.JettyServletEngineAdapter.serviceRequest(JettyServletEngineAdapter.java:179)
		at com.google.apphosting.runtime.RequestRunner.dispatchServletRequest(RequestRunner.java:264)
		at com.google.apphosting.runtime.RequestRunner.dispatchRequest(RequestRunner.java:229)
		at com.google.apphosting.runtime.RequestRunner.run(RequestRunner.java:194)
		at com.google.apphosting.runtime.ThreadGroupPool$PoolEntry.run(ThreadGroupPool.java:273)
		... 1 more
Caused by: io.grpc.StatusRuntimeException: PERMISSION_DENIED: Permission 'secretmanager.versions.access' denied for resource 'projects/REDACTED-PROJECT-ID/secrets/sql-cred-live-label-nomulus-nomulus/versions/latest' (or it may not exist).
	at io.grpc.Status.asRuntimeException(Status.java:539)
	... 25 more

org.hibernate.jpa.internal.util.LogHelper logPersistenceUnitInformation: HHH000204: Processing PersistenceUnitInfo [name: nomulus]

org.hibernate.Version logVersion: HHH000412: Hibernate ORM core version 5.6.14.Final

org.hibernate.annotations.common.reflection.java.JavaReflectionManager <clinit>: HCANN000001: Hibernate Commons Annotations {5.1.2.Final}

org.hibernate.engine.jdbc.connections.internal.ConnectionProviderInitiator initiateService: HHH000130: Instantiating explicit connection provider: org.hibernate.hikaricp.internal.HikariCPConnectionProvider

com.zaxxer.hikari.HikariDataSource <init>: HikariPool-1 - Starting...

com.google.cloud.sql.core.CoreSocketFactory connect: Connecting to Cloud SQL instance [REDACTED-PROJECT-ID:us-central1:nomulus] via SSL socket.

com.google.cloud.sql.core.CoreSocketFactory getInstance: First Cloud SQL connection, generating RSA key pair.

com.zaxxer.hikari.pool.HikariPool throwPoolInitializationException: HikariPool-1 - Exception during pool initialization.
org.postgresql.util.PSQLException: Something unusual has occurred to cause the driver to fail. Please report this exception.
	at org.postgresql.Driver.connect(Driver.java:314)
	at com.zaxxer.hikari.util.DriverDataSource.getConnection(DriverDataSource.java:121)
	at com.zaxxer.hikari.pool.PoolBase.newConnection(PoolBase.java:358)
	at com.zaxxer.hikari.pool.PoolBase.newPoolEntry(PoolBase.java:206)
	at com.zaxxer.hikari.pool.HikariPool.createPoolEntry(HikariPool.java:477)
	at com.zaxxer.hikari.pool.HikariPool.checkFailFast(HikariPool.java:560)
	at com.zaxxer.hikari.pool.HikariPool.<init>(HikariPool.java:115)
	at com.zaxxer.hikari.HikariDataSource.<init>(HikariDataSource.java:81)
	at org.hibernate.hikaricp.internal.HikariCPConnectionProvider.configure(HikariCPConnectionProvider.java:59)
	at org.hibernate.boot.registry.internal.StandardServiceRegistryImpl.configureService(StandardServiceRegistryImpl.java:107)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.initializeService(AbstractServiceRegistryImpl.java:246)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.getService(AbstractServiceRegistryImpl.java:214)
	at org.hibernate.engine.jdbc.env.internal.JdbcEnvironmentInitiator.buildJdbcConnectionAccess(JdbcEnvironmentInitiator.java:146)
	at org.hibernate.engine.jdbc.env.internal.JdbcEnvironmentInitiator.initiateService(JdbcEnvironmentInitiator.java:66)
	at org.hibernate.engine.jdbc.env.internal.JdbcEnvironmentInitiator.initiateService(JdbcEnvironmentInitiator.java:35)
	at org.hibernate.boot.registry.internal.StandardServiceRegistryImpl.initiateService(StandardServiceRegistryImpl.java:101)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.createService(AbstractServiceRegistryImpl.java:263)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.initializeService(AbstractServiceRegistryImpl.java:237)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.getService(AbstractServiceRegistryImpl.java:214)
	at org.hibernate.id.factory.internal.DefaultIdentifierGeneratorFactory.injectServices(DefaultIdentifierGeneratorFactory.java:175)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.injectDependencies(AbstractServiceRegistryImpl.java:286)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.initializeService(AbstractServiceRegistryImpl.java:243)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.getService(AbstractServiceRegistryImpl.java:214)
	at org.hibernate.boot.internal.InFlightMetadataCollectorImpl.<init>(InFlightMetadataCollectorImpl.java:173)
	at org.hibernate.boot.model.process.spi.MetadataBuildingProcess.complete(MetadataBuildingProcess.java:127)
	at org.hibernate.jpa.boot.internal.EntityManagerFactoryBuilderImpl.metadata(EntityManagerFactoryBuilderImpl.java:1460)
	at org.hibernate.jpa.boot.internal.EntityManagerFactoryBuilderImpl.build(EntityManagerFactoryBuilderImpl.java:1494)
	at org.hibernate.jpa.HibernatePersistenceProvider.createEntityManagerFactory(HibernatePersistenceProvider.java:56)
	at javax.persistence.Persistence.createEntityManagerFactory(Persistence.java:79)
	at google.registry.persistence.PersistenceModule.create(PersistenceModule.java:309)
	at google.registry.persistence.PersistenceModule.provideAppEngineJpaTm(PersistenceModule.java:233)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.provideAppEngineJpaTm(PersistenceModule_ProvideAppEngineJpaTmFactory.java:59)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.get(PersistenceModule_ProvideAppEngineJpaTmFactory.java:47)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.get(PersistenceModule_ProvideAppEngineJpaTmFactory.java:15)
	at dagger.internal.DoubleCheck.get(DoubleCheck.java:47)
	at google.registry.persistence.DaggerPersistenceComponent$PersistenceComponentImpl.appEngineJpaTransactionManager(DaggerPersistenceComponent.java:140)
	at google.registry.persistence.transaction.TransactionManagerFactory.createJpaTransactionManager(TransactionManagerFactory.java:47)
	at com.google.common.base.Suppliers$NonSerializableMemoizingSupplier.get(Suppliers.java:183)
	at google.registry.persistence.transaction.TransactionManagerFactory.tm(TransactionManagerFactory.java:81)
	at google.registry.request.auth.AuthenticatedRegistrarAccessor.createRoleMap(AuthenticatedRegistrarAccessor.java:313)
	at google.registry.request.auth.AuthenticatedRegistrarAccessor.<init>(AuthenticatedRegistrarAccessor.java:116)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.authenticatedRegistrarAccessor(DaggerFrontendComponent.java:1412)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.injectConsoleUiAction(DaggerFrontendComponent.java:1668)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.consoleUiAction(DaggerFrontendComponent.java:1563)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at google.registry.request.Router.lambda$newInstantiator$0(Router.java:100)
	at google.registry.request.RequestHandler.handleRequest(RequestHandler.java:157)
	at google.registry.module.ServletBase.service(ServletBase.java:78)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
	at org.eclipse.jetty.servlet.ServletHolder$NotAsync.service(ServletHolder.java:1459)
	at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799)
	at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1656)
	at com.google.apphosting.utils.servlet.JdbcMySqlConnectionCleanupFilter.doFilter(JdbcMySqlConnectionCleanupFilter.java:78)
	at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
	at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1626)
	at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:552)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
	at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:571)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
	at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at com.google.apphosting.runtime.jetty9.ParseBlobUploadHandler.handle(ParseBlobUploadHandler.java:124)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
	at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1440)
	at com.google.apphosting.runtime.jetty94.AppEngineWebAppContext.doHandle(AppEngineWebAppContext.java:289)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188)
	at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:505)
	at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186)
	at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1355)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
	at com.google.apphosting.runtime.jetty94.AppVersionHandlerMap.handle(AppVersionHandlerMap.java:113)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at com.google.apphosting.runtime.jetty94.SizeLimitHandler.handle(SizeLimitHandler.java:94)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.Server.handle(Server.java:516)
	at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:487)
	at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:732)
	at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:479)
	at com.google.apphosting.runtime.jetty94.RpcConnection.handle(RpcConnection.java:269)
	at com.google.apphosting.runtime.jetty94.RpcConnector.serviceRequest(RpcConnector.java:99)
	at com.google.apphosting.runtime.jetty94.JettyServletEngineAdapter.serviceRequest(JettyServletEngineAdapter.java:179)
	at com.google.apphosting.runtime.RequestRunner.dispatchServletRequest(RequestRunner.java:264)
	at com.google.apphosting.runtime.RequestRunner.dispatchRequest(RequestRunner.java:229)
	at com.google.apphosting.runtime.RequestRunner.run(RequestRunner.java:194)
	at com.google.apphosting.runtime.ThreadGroupPool$PoolEntry.run(ThreadGroupPool.java:273)
	at java.lang.Thread.run(Thread.java:750)
Caused by: java.lang.RuntimeException: [REDACTED-PROJECT-ID:us-central1:nomulus] The Cloud SQL Instance does not exist or your account is not authorized to access it. Please verify the instance connection name and check the IAM permissions for project "REDACTED-PROJECT-ID" 
	at com.google.cloud.sql.core.CloudSqlInstance.addExceptionContext(CloudSqlInstance.java:638)
	at com.google.cloud.sql.core.CloudSqlInstance.fetchMetadata(CloudSqlInstance.java:513)
	at com.google.common.util.concurrent.TrustedListenableFutureTask$TrustedFutureInterruptibleTask.runInterruptibly(TrustedListenableFutureTask.java:131)
	at com.google.common.util.concurrent.InterruptibleTask.run(InterruptibleTask.java:74)
	at com.google.common.util.concurrent.TrustedListenableFutureTask.run(TrustedListenableFutureTask.java:82)
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180)
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	... 1 more
Caused by: com.google.api.client.googleapis.json.GoogleJsonResponseException: 403 Forbidden
GET https://sqladmin.googleapis.com/sql/v1beta4/projects/REDACTED-PROJECT-ID/instances/us-central1~nomulus/connectSettings
{
  "code": 403,
  "errors": [
    {
      "domain": "global",
      "message": "The client is not authorized to make this request.",
      "reason": "notAuthorized"
    }
  ],
  "message": "The client is not authorized to make this request."
}
	at com.google.api.client.googleapis.json.GoogleJsonResponseException.from(GoogleJsonResponseException.java:146)
	at com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:118)
	at com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:37)
	at com.google.api.client.googleapis.services.AbstractGoogleClientRequest$1.interceptResponse(AbstractGoogleClientRequest.java:439)
	at com.google.api.client.http.HttpRequest.execute(HttpRequest.java:1111)
	at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:525)
	at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:466)
	at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.execute(AbstractGoogleClientRequest.java:576)
	at com.google.cloud.sql.core.CloudSqlInstance.fetchMetadata(CloudSqlInstance.java:468)
	... 10 more

org.hibernate.service.internal.AbstractServiceRegistryImpl stopService: HHH000369: Error stopping service [class org.hibernate.hikaricp.internal.HikariCPConnectionProvider]
java.lang.NullPointerException
	at org.hibernate.hikaricp.internal.HikariCPConnectionProvider.stop(HikariCPConnectionProvider.java:122)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.stopService(AbstractServiceRegistryImpl.java:390)
	at org.hibernate.jpa.boot.internal.EntityManagerFactoryBuilderImpl.cleanup(EntityManagerFactoryBuilderImpl.java:1449)
	at org.hibernate.jpa.boot.internal.EntityManagerFactoryBuilderImpl.build(EntityManagerFactoryBuilderImpl.java:1508)
	at org.hibernate.jpa.HibernatePersistenceProvider.createEntityManagerFactory(HibernatePersistenceProvider.java:56)
	at javax.persistence.Persistence.createEntityManagerFactory(Persistence.java:79)
	at google.registry.persistence.PersistenceModule.create(PersistenceModule.java:309)
	at google.registry.persistence.PersistenceModule.provideAppEngineJpaTm(PersistenceModule.java:233)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.provideAppEngineJpaTm(PersistenceModule_ProvideAppEngineJpaTmFactory.java:59)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.get(PersistenceModule_ProvideAppEngineJpaTmFactory.java:47)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.get(PersistenceModule_ProvideAppEngineJpaTmFactory.java:15)
	at dagger.internal.DoubleCheck.get(DoubleCheck.java:47)
	at google.registry.persistence.DaggerPersistenceComponent$PersistenceComponentImpl.appEngineJpaTransactionManager(DaggerPersistenceComponent.java:140)
	at google.registry.persistence.transaction.TransactionManagerFactory.createJpaTransactionManager(TransactionManagerFactory.java:47)
	at com.google.common.base.Suppliers$NonSerializableMemoizingSupplier.get(Suppliers.java:183)
	at google.registry.persistence.transaction.TransactionManagerFactory.tm(TransactionManagerFactory.java:81)
	at google.registry.request.auth.AuthenticatedRegistrarAccessor.createRoleMap(AuthenticatedRegistrarAccessor.java:313)
	at google.registry.request.auth.AuthenticatedRegistrarAccessor.<init>(AuthenticatedRegistrarAccessor.java:116)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.authenticatedRegistrarAccessor(DaggerFrontendComponent.java:1412)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.injectConsoleUiAction(DaggerFrontendComponent.java:1668)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.consoleUiAction(DaggerFrontendComponent.java:1563)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at google.registry.request.Router.lambda$newInstantiator$0(Router.java:100)
	at google.registry.request.RequestHandler.handleRequest(RequestHandler.java:157)
	at google.registry.module.ServletBase.service(ServletBase.java:78)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
	at org.eclipse.jetty.servlet.ServletHolder$NotAsync.service(ServletHolder.java:1459)
	at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799)
	at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1656)
	at com.google.apphosting.utils.servlet.JdbcMySqlConnectionCleanupFilter.doFilter(JdbcMySqlConnectionCleanupFilter.java:78)
	at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
	at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1626)
	at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:552)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
	at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:571)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
	at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at com.google.apphosting.runtime.jetty9.ParseBlobUploadHandler.handle(ParseBlobUploadHandler.java:124)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
	at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1440)
	at com.google.apphosting.runtime.jetty94.AppEngineWebAppContext.doHandle(AppEngineWebAppContext.java:289)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188)
	at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:505)
	at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186)
	at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1355)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
	at com.google.apphosting.runtime.jetty94.AppVersionHandlerMap.handle(AppVersionHandlerMap.java:113)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at com.google.apphosting.runtime.jetty94.SizeLimitHandler.handle(SizeLimitHandler.java:94)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.Server.handle(Server.java:516)
	at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:487)
	at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:732)
	at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:479)
	at com.google.apphosting.runtime.jetty94.RpcConnection.handle(RpcConnection.java:269)
	at com.google.apphosting.runtime.jetty94.RpcConnector.serviceRequest(RpcConnector.java:99)
	at com.google.apphosting.runtime.jetty94.JettyServletEngineAdapter.serviceRequest(JettyServletEngineAdapter.java:179)
	at com.google.apphosting.runtime.RequestRunner.dispatchServletRequest(RequestRunner.java:264)
	at com.google.apphosting.runtime.RequestRunner.dispatchRequest(RequestRunner.java:229)
	at com.google.apphosting.runtime.RequestRunner.run(RequestRunner.java:194)
	at com.google.apphosting.runtime.ThreadGroupPool$PoolEntry.run(ThreadGroupPool.java:273)
	at java.lang.Thread.run(Thread.java:750)

google.registry.request.RequestMetrics record: Action called for path=/registrar, method=GET, authLevel=USER, success=true. Took: 6.267s.

google.registry.module.ServletBase service: Finished FrontendServlet request. Latency: 6.319s.

org.eclipse.jetty.server.HttpChannel handleException: handleException /registrar com.google.api.client.googleapis.json.GoogleJsonResponseException: 403 Forbidden
GET https://sqladmin.googleapis.com/sql/v1beta4/projects/REDACTED-PROJECT-ID/instances/us-central1~nomulus/connectSettings
{
  "code": 403,
  "errors": [
    {
      "domain": "global",
      "message": "The client is not authorized to make this request.",
      "reason": "notAuthorized"
    }
  ],
  "message": "The client is not authorized to make this request."
}

Uncaught exception from servlet
org.hibernate.service.spi.ServiceException: Unable to create requested service [org.hibernate.engine.jdbc.env.spi.JdbcEnvironment]
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.createService(AbstractServiceRegistryImpl.java:275)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.initializeService(AbstractServiceRegistryImpl.java:237)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.getService(AbstractServiceRegistryImpl.java:214)
	at org.hibernate.id.factory.internal.DefaultIdentifierGeneratorFactory.injectServices(DefaultIdentifierGeneratorFactory.java:175)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.injectDependencies(AbstractServiceRegistryImpl.java:286)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.initializeService(AbstractServiceRegistryImpl.java:243)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.getService(AbstractServiceRegistryImpl.java:214)
	at org.hibernate.boot.internal.InFlightMetadataCollectorImpl.<init>(InFlightMetadataCollectorImpl.java:173)
	at org.hibernate.boot.model.process.spi.MetadataBuildingProcess.complete(MetadataBuildingProcess.java:127)
	at org.hibernate.jpa.boot.internal.EntityManagerFactoryBuilderImpl.metadata(EntityManagerFactoryBuilderImpl.java:1460)
	at org.hibernate.jpa.boot.internal.EntityManagerFactoryBuilderImpl.build(EntityManagerFactoryBuilderImpl.java:1494)
	at org.hibernate.jpa.HibernatePersistenceProvider.createEntityManagerFactory(HibernatePersistenceProvider.java:56)
	at javax.persistence.Persistence.createEntityManagerFactory(Persistence.java:79)
	at google.registry.persistence.PersistenceModule.create(PersistenceModule.java:309)
	at google.registry.persistence.PersistenceModule.provideAppEngineJpaTm(PersistenceModule.java:233)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.provideAppEngineJpaTm(PersistenceModule_ProvideAppEngineJpaTmFactory.java:59)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.get(PersistenceModule_ProvideAppEngineJpaTmFactory.java:47)
	at google.registry.persistence.PersistenceModule_ProvideAppEngineJpaTmFactory.get(PersistenceModule_ProvideAppEngineJpaTmFactory.java:15)
	at dagger.internal.DoubleCheck.get(DoubleCheck.java:47)
	at google.registry.persistence.DaggerPersistenceComponent$PersistenceComponentImpl.appEngineJpaTransactionManager(DaggerPersistenceComponent.java:140)
	at google.registry.persistence.transaction.TransactionManagerFactory.createJpaTransactionManager(TransactionManagerFactory.java:47)
	at com.google.common.base.Suppliers$NonSerializableMemoizingSupplier.get(Suppliers.java:183)
	at google.registry.persistence.transaction.TransactionManagerFactory.tm(TransactionManagerFactory.java:81)
	at google.registry.request.auth.AuthenticatedRegistrarAccessor.createRoleMap(AuthenticatedRegistrarAccessor.java:313)
	at google.registry.request.auth.AuthenticatedRegistrarAccessor.<init>(AuthenticatedRegistrarAccessor.java:116)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.authenticatedRegistrarAccessor(DaggerFrontendComponent.java:1412)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.injectConsoleUiAction(DaggerFrontendComponent.java:1668)
	at google.registry.module.frontend.DaggerFrontendComponent$FrontendRequestComponentImpl.consoleUiAction(DaggerFrontendComponent.java:1563)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at google.registry.request.Router.lambda$newInstantiator$0(Router.java:100)
	at google.registry.request.RequestHandler.handleRequest(RequestHandler.java:157)
	at google.registry.module.ServletBase.service(ServletBase.java:78)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
	at org.eclipse.jetty.servlet.ServletHolder$NotAsync.service(ServletHolder.java:1459)
	at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799)
	at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1656)
	at com.google.apphosting.utils.servlet.JdbcMySqlConnectionCleanupFilter.doFilter(JdbcMySqlConnectionCleanupFilter.java:78)
	at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
	at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1626)
	at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:552)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
	at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:571)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
	at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at com.google.apphosting.runtime.jetty9.ParseBlobUploadHandler.handle(ParseBlobUploadHandler.java:124)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)
	at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1440)
	at com.google.apphosting.runtime.jetty94.AppEngineWebAppContext.doHandle(AppEngineWebAppContext.java:289)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188)
	at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:505)
	at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594)
	at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186)
	at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1355)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
	at com.google.apphosting.runtime.jetty94.AppVersionHandlerMap.handle(AppVersionHandlerMap.java:113)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at com.google.apphosting.runtime.jetty94.SizeLimitHandler.handle(SizeLimitHandler.java:94)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)
	at org.eclipse.jetty.server.Server.handle(Server.java:516)
	at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:487)
	at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:732)
	at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:479)
	at com.google.apphosting.runtime.jetty94.RpcConnection.handle(RpcConnection.java:269)
	at com.google.apphosting.runtime.jetty94.RpcConnector.serviceRequest(RpcConnector.java:99)
	at com.google.apphosting.runtime.jetty94.JettyServletEngineAdapter.serviceRequest(JettyServletEngineAdapter.java:179)
	at com.google.apphosting.runtime.RequestRunner.dispatchServletRequest(RequestRunner.java:264)
	at com.google.apphosting.runtime.RequestRunner.dispatchRequest(RequestRunner.java:229)
	at com.google.apphosting.runtime.RequestRunner.run(RequestRunner.java:194)
	at com.google.apphosting.runtime.ThreadGroupPool$PoolEntry.run(ThreadGroupPool.java:273)
	at java.lang.Thread.run(Thread.java:750)
Caused by: org.hibernate.HibernateException: com.zaxxer.hikari.pool.HikariPool$PoolInitializationException: Failed to initialize pool: Something unusual has occurred to cause the driver to fail. Please report this exception.
	at org.hibernate.hikaricp.internal.HikariCPConnectionProvider.configure(HikariCPConnectionProvider.java:63)
	at org.hibernate.boot.registry.internal.StandardServiceRegistryImpl.configureService(StandardServiceRegistryImpl.java:107)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.initializeService(AbstractServiceRegistryImpl.java:246)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.getService(AbstractServiceRegistryImpl.java:214)
	at org.hibernate.engine.jdbc.env.internal.JdbcEnvironmentInitiator.buildJdbcConnectionAccess(JdbcEnvironmentInitiator.java:146)
	at org.hibernate.engine.jdbc.env.internal.JdbcEnvironmentInitiator.initiateService(JdbcEnvironmentInitiator.java:66)
	at org.hibernate.engine.jdbc.env.internal.JdbcEnvironmentInitiator.initiateService(JdbcEnvironmentInitiator.java:35)
	at org.hibernate.boot.registry.internal.StandardServiceRegistryImpl.initiateService(StandardServiceRegistryImpl.java:101)
	at org.hibernate.service.internal.AbstractServiceRegistryImpl.createService(AbstractServiceRegistryImpl.java:263)
	... 76 more
Caused by: com.zaxxer.hikari.pool.HikariPool$PoolInitializationException: Failed to initialize pool: Something unusual has occurred to cause the driver to fail. Please report this exception.
	at com.zaxxer.hikari.pool.HikariPool.throwPoolInitializationException(HikariPool.java:595)
	at com.zaxxer.hikari.pool.HikariPool.checkFailFast(HikariPool.java:581)
	at com.zaxxer.hikari.pool.HikariPool.<init>(HikariPool.java:115)
	at com.zaxxer.hikari.HikariDataSource.<init>(HikariDataSource.java:81)
	at org.hibernate.hikaricp.internal.HikariCPConnectionProvider.configure(HikariCPConnectionProvider.java:59)
	... 84 more
Caused by: org.postgresql.util.PSQLException: Something unusual has occurred to cause the driver to fail. Please report this exception.
	at org.postgresql.Driver.connect(Driver.java:314)
	at com.zaxxer.hikari.util.DriverDataSource.getConnection(DriverDataSource.java:121)
	at com.zaxxer.hikari.pool.PoolBase.newConnection(PoolBase.java:358)
	at com.zaxxer.hikari.pool.PoolBase.newPoolEntry(PoolBase.java:206)
	at com.zaxxer.hikari.pool.HikariPool.createPoolEntry(HikariPool.java:477)
	at com.zaxxer.hikari.pool.HikariPool.checkFailFast(HikariPool.java:560)
	... 87 more
Caused by: java.lang.RuntimeException: [REDACTED-PROJECT-ID:us-central1:nomulus] The Cloud SQL Instance does not exist or your account is not authorized to access it. Please verify the instance connection name and check the IAM permissions for project "REDACTED-PROJECT-ID" 
	at com.google.cloud.sql.core.CloudSqlInstance.addExceptionContext(CloudSqlInstance.java:638)
	at com.google.cloud.sql.core.CloudSqlInstance.fetchMetadata(CloudSqlInstance.java:513)
	at com.google.common.util.concurrent.TrustedListenableFutureTask$TrustedFutureInterruptibleTask.runInterruptibly(TrustedListenableFutureTask.java:131)
	at com.google.common.util.concurrent.InterruptibleTask.run(InterruptibleTask.java:74)
	at com.google.common.util.concurrent.TrustedListenableFutureTask.run(TrustedListenableFutureTask.java:82)
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180)
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	... 1 more
Caused by: com.google.api.client.googleapis.json.GoogleJsonResponseException: 403 Forbidden
GET https://sqladmin.googleapis.com/sql/v1beta4/projects/REDACTED-PROJECT-ID/instances/us-central1~nomulus/connectSettings
{
  "code": 403,
  "errors": [
    {
      "domain": "global",
      "message": "The client is not authorized to make this request.",
      "reason": "notAuthorized"
    }
  ],
  "message": "The client is not authorized to make this request."
}
	at com.google.api.client.googleapis.json.GoogleJsonResponseException.from(GoogleJsonResponseException.java:146)
	at com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:118)
	at com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:37)
	at com.google.api.client.googleapis.services.AbstractGoogleClientRequest$1.interceptResponse(AbstractGoogleClientRequest.java:439)
	at com.google.api.client.http.HttpRequest.execute(HttpRequest.java:1111)
	at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:525)
	at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:466)
	at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.execute(AbstractGoogleClientRequest.java:576)
	at com.google.cloud.sql.core.CloudSqlInstance.fetchMetadata(CloudSqlInstance.java:468)
	... 10 more

Issue Install guide is outdated. | Bazel fails to build #365 share some similarities with this one, although no mention of SQL Secret Manager is made.

Okay, so the way to store credentials for SQL DB via nomulus admin tool is :

$ nomulus -e $ENV save_sql_credential --user tool
Password : <YOUR_SQL_PASSWORD>