Google App Engine搜索报RPCFailedError：无有效安全票据调用RPC求助

排查线索 #

• 身份凭证有效性检查
  • 确认代码运行环境：如果是本地开发，需检查是否正确配置了应用默认凭证；如果是GAE环境，确认服务账号拥有搜索服务相关权限（如search.indexes.get、search.documents.list）
  • 排查线程上下文：若index.get_range在异步线程或后台任务中执行，需确保身份凭证被正确传递（GAE的安全凭证是线程绑定的）
• 代码逻辑问题
  • 检查while True循环：无终止条件的循环会持续发起RPC调用，可能导致连接池耗尽或凭证超时失效
  • 确认请求生命周期：避免在Flask请求返回后继续执行RPC调用，此时请求上下文已销毁，安全凭证会失效
• 依赖与环境兼容性
  • 核对依赖版本：旧版google-appengine-api可能存在凭证处理bug，建议升级到GAE SDK支持的最新兼容版本
  • 确认Python版本兼容性：当前使用Python3.12，需确保对应的GAE SDK版本支持该Python版本

功能弃用说明 #

GAE搜索服务（Search API）已处于官方弃用状态，官方推荐迁移至Cloud Search或Cloud Firestore全文搜索作为替代方案。弃用后的服务可能出现不稳定的RPC连接问题，这也是近期错误频发的潜在原因之一。

相关代码 #

@app.route('/sync/', methods=['GET'])
@app.route('/sync/<yt_video_id>', methods=['POST','GET'])
def sync_video(yt_video_id=None):
  GAE_APP_ID = os.environ['GOOGLE_CLOUD_PROJECT']
  syncthumb = util.param('syncthumb', bool)
  if not syncthumb:
    syncthumb = False

  if yt_video_id:
    print("calling video worker")
    util.sync_video_worker(yt_video_id, syncthumb=syncthumb)
    success = 'ok: synced ' + yt_video_id
    return success
    
  index = search.Index('general-index')
  print("found index")
  while True:
    document_ids = [
      document.doc_id
      for document
      in index.get_range(ids_only=True)]

错误堆栈 #

google.appengine.runtime.apiproxy_errors.RPCFailedError Attempted RPC call without active security ticket
Traceback (most recent call last):
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/flask/app.py", line 2529, in wsgi_app
response = self.full_dispatch_request()
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/flask/app.py", line 1825, in full_dispatch_request
rv = self.handle_user_exception(e)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/flask/app.py", line 1823, in full_dispatch_request
rv = self.dispatch_request()
^^^^^^^^^^^^^^^^^^^^^^^
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/flask/app.py", line 1799, in dispatch_request
return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/workspace/sync.py", line 178, in sync_video
in index.get_range(ids_only=True)]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/google/appengine/datastore/datastore_rpc.py", line 94, in positional_wrapper
return wrapped(*args, **kwds)
^^^^^^^^^^^^^^^^^^^^^^
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/google/appengine/api/search/search.py", line 4024, in get_range
return self.get_range_async(
^^^^^^^^^^^^^^^^^^^^^
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/google/appengine/datastore/datastore_rpc.py", line 94, in positional_wrapper
return wrapped(*args, **kwds)
^^^^^^^^^^^^^^^^^^^^^^
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/google/appengine/api/search/search.py", line 4063, in get_range_async
return _RpcOperationFuture(
^^^^^^^^^^^^^^^^^^^^
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/google/appengine/api/search/search.py", line 266, in init
self._rpc.make_call(call, request, response)
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/google/appengine/api/apiproxy_stub_map.py", line 565, in make_call
self.__rpc.MakeCall(self.__service, method, request, response)
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/google/appengine/api/apiproxy_rpc.py", line 133, in MakeCall
self._MakeCallImpl()
File "/layers/google.python.pip/pip/lib/python3.12/site-packages/google/appengine/runtime/default_api_stub.py", line 193, in _MakeCallImpl
raise apiproxy_errors.RPCFailedError(
google.appengine.runtime.apiproxy_errors.RPCFailedError: Attempted RPC call without active security ticket

内容的提问来源于stack exchange，提问作者ffejrekaburb