requester pays support

Release Notes

For: uc-cdis/fence
Notes since tag: 4.0.0
Notes to tag/commit: 66e0123
Generated: 2019-07-31

New Features

• new optional/configurable support for accessing Google buckets w/ requester
  pays enabled (#668)
• allow configuration of default billing projects for accessing Google
  buckets w/ requester pays enabled (#668)
• allow configuration for automatic billing permission assignment for Google
  service accounts to ease data access for Google buckets w/ requester pays
  enabled (#668)
• add userProject field to Google signed urls if a billing project is
  provided (by user or by default configuration) (#668)
• give Google service accounts billing permission to default billing project
  for Data Access Method: Temporary Service Account Credentials (if
  configured to do so) (#668)

Bug Fixes

• Re-add SAs to all GBAGs in PATCH endpoint (#670)
• don't overwrite top-level user.yaml mapping for fence project to arborist
  resource if no resource path field in individual user projects (#667)
• correctly get resource mapping in user sync (#666)
• in usersync _read_file, init Popen with text mode so that output stream is
  string not bytestring (#665)
• Fix loading privacy policy file in python3 (#659)
• Fix caching (#659)

Improvements

• create project if not exist for google bucket link fence-create script
  (#657)
• add google organization whitelist to force_default_if_none list in
  config.py (#662)

Dependency Updates

• cirrus to 1.1.0 (#668)

Deployment Changes

• configuration added for requester pays Google Buckets. if this is needed,
  you'll need to update configuration. default config does not support
  requester pays bucket access (#668)