Google Cloud Classic v6.67.0, Sep 27 23

Google Cloud Classic v6.67.0 published on Wednesday, Sep 27, 2023 by Pulumi

gcp.cloudrunv2.Service

Explore with Pulumi AI

Google Cloud Classic v6.67.0 published on Wednesday, Sep 27, 2023 by Pulumi

Service acts as a top-level container that manages a set of configurations and revision templates which implement a network service. Service exists to provide a singular abstraction which can be access controlled, reasoned about, and which encapsulates software lifecycle decisions such as rollout policy and team resource ownership.

To get more information about Service, see:

API documentation
How-to Guides
- Official Documentation

Example Usage

Cloudrunv2 Service Basic

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var @default = new Gcp.CloudRunV2.Service("default", new()
    {
        Ingress = "INGRESS_TRAFFIC_ALL",
        Location = "us-central1",
        Template = new Gcp.CloudRunV2.Inputs.ServiceTemplateArgs
        {
            Containers = new[]
            {
                new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerArgs
                {
                    Image = "us-docker.pkg.dev/cloudrun/container/hello",
                },
            },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/cloudrunv2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudrunv2.NewService(ctx, "default", &cloudrunv2.ServiceArgs{
			Ingress:  pulumi.String("INGRESS_TRAFFIC_ALL"),
			Location: pulumi.String("us-central1"),
			Template: &cloudrunv2.ServiceTemplateArgs{
				Containers: cloudrunv2.ServiceTemplateContainerArray{
					&cloudrunv2.ServiceTemplateContainerArgs{
						Image: pulumi.String("us-docker.pkg.dev/cloudrun/container/hello"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.cloudrunv2.Service;
import com.pulumi.gcp.cloudrunv2.ServiceArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTemplateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var default_ = new Service("default", ServiceArgs.builder()        
            .ingress("INGRESS_TRAFFIC_ALL")
            .location("us-central1")
            .template(ServiceTemplateArgs.builder()
                .containers(ServiceTemplateContainerArgs.builder()
                    .image("us-docker.pkg.dev/cloudrun/container/hello")
                    .build())
                .build())
            .build());

    }
}

import pulumi
import pulumi_gcp as gcp

default = gcp.cloudrunv2.Service("default",
    ingress="INGRESS_TRAFFIC_ALL",
    location="us-central1",
    template=gcp.cloudrunv2.ServiceTemplateArgs(
        containers=[gcp.cloudrunv2.ServiceTemplateContainerArgs(
            image="us-docker.pkg.dev/cloudrun/container/hello",
        )],
    ))

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const _default = new gcp.cloudrunv2.Service("default", {
    ingress: "INGRESS_TRAFFIC_ALL",
    location: "us-central1",
    template: {
        containers: [{
            image: "us-docker.pkg.dev/cloudrun/container/hello",
        }],
    },
});

resources:
  default:
    type: gcp:cloudrunv2:Service
    properties:
      ingress: INGRESS_TRAFFIC_ALL
      location: us-central1
      template:
        containers:
          - image: us-docker.pkg.dev/cloudrun/container/hello

Cloudrunv2 Service Sql

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var secret = new Gcp.SecretManager.Secret("secret", new()
    {
        SecretId = "secret-1",
        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs
        {
            Auto = null,
        },
    });

    var secret_version_data = new Gcp.SecretManager.SecretVersion("secret-version-data", new()
    {
        Secret = secret.Name,
        SecretData = "secret-data",
    });

    var instance = new Gcp.Sql.DatabaseInstance("instance", new()
    {
        Region = "us-central1",
        DatabaseVersion = "MYSQL_5_7",
        Settings = new Gcp.Sql.Inputs.DatabaseInstanceSettingsArgs
        {
            Tier = "db-f1-micro",
        },
        DeletionProtection = true,
    });

    var @default = new Gcp.CloudRunV2.Service("default", new()
    {
        Location = "us-central1",
        Ingress = "INGRESS_TRAFFIC_ALL",
        Template = new Gcp.CloudRunV2.Inputs.ServiceTemplateArgs
        {
            Scaling = new Gcp.CloudRunV2.Inputs.ServiceTemplateScalingArgs
            {
                MaxInstanceCount = 2,
            },
            Volumes = new[]
            {
                new Gcp.CloudRunV2.Inputs.ServiceTemplateVolumeArgs
                {
                    Name = "cloudsql",
                    CloudSqlInstance = new Gcp.CloudRunV2.Inputs.ServiceTemplateVolumeCloudSqlInstanceArgs
                    {
                        Instances = new[]
                        {
                            instance.ConnectionName,
                        },
                    },
                },
            },
            Containers = new[]
            {
                new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerArgs
                {
                    Image = "us-docker.pkg.dev/cloudrun/container/hello",
                    Envs = new[]
                    {
                        new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerEnvArgs
                        {
                            Name = "FOO",
                            Value = "bar",
                        },
                        new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerEnvArgs
                        {
                            Name = "SECRET_ENV_VAR",
                            ValueSource = new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerEnvValueSourceArgs
                            {
                                SecretKeyRef = new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerEnvValueSourceSecretKeyRefArgs
                                {
                                    Secret = secret.SecretId,
                                    Version = "1",
                                },
                            },
                        },
                    },
                    VolumeMounts = new[]
                    {
                        new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerVolumeMountArgs
                        {
                            Name = "cloudsql",
                            MountPath = "/cloudsql",
                        },
                    },
                },
            },
        },
        Traffics = new[]
        {
            new Gcp.CloudRunV2.Inputs.ServiceTrafficArgs
            {
                Type = "TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST",
                Percent = 100,
            },
        },
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            secret_version_data,
        },
    });

    var project = Gcp.Organizations.GetProject.Invoke();

    var secret_access = new Gcp.SecretManager.SecretIamMember("secret-access", new()
    {
        SecretId = secret.Id,
        Role = "roles/secretmanager.secretAccessor",
        Member = $"serviceAccount:{project.Apply(getProjectResult => getProjectResult.Number)}-compute@developer.gserviceaccount.com",
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            secret,
        },
    });

});

package main

import (
	"fmt"

	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/cloudrunv2"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/organizations"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/secretmanager"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/sql"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		secret, err := secretmanager.NewSecret(ctx, "secret", &secretmanager.SecretArgs{
			SecretId: pulumi.String("secret-1"),
			Replication: &secretmanager.SecretReplicationArgs{
				Auto: nil,
			},
		})
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretVersion(ctx, "secret-version-data", &secretmanager.SecretVersionArgs{
			Secret:     secret.Name,
			SecretData: pulumi.String("secret-data"),
		})
		if err != nil {
			return err
		}
		instance, err := sql.NewDatabaseInstance(ctx, "instance", &sql.DatabaseInstanceArgs{
			Region:          pulumi.String("us-central1"),
			DatabaseVersion: pulumi.String("MYSQL_5_7"),
			Settings: &sql.DatabaseInstanceSettingsArgs{
				Tier: pulumi.String("db-f1-micro"),
			},
			DeletionProtection: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = cloudrunv2.NewService(ctx, "default", &cloudrunv2.ServiceArgs{
			Location: pulumi.String("us-central1"),
			Ingress:  pulumi.String("INGRESS_TRAFFIC_ALL"),
			Template: &cloudrunv2.ServiceTemplateArgs{
				Scaling: &cloudrunv2.ServiceTemplateScalingArgs{
					MaxInstanceCount: pulumi.Int(2),
				},
				Volumes: cloudrunv2.ServiceTemplateVolumeArray{
					&cloudrunv2.ServiceTemplateVolumeArgs{
						Name: pulumi.String("cloudsql"),
						CloudSqlInstance: &cloudrunv2.ServiceTemplateVolumeCloudSqlInstanceArgs{
							Instances: pulumi.StringArray{
								instance.ConnectionName,
							},
						},
					},
				},
				Containers: cloudrunv2.ServiceTemplateContainerArray{
					&cloudrunv2.ServiceTemplateContainerArgs{
						Image: pulumi.String("us-docker.pkg.dev/cloudrun/container/hello"),
						Envs: cloudrunv2.ServiceTemplateContainerEnvArray{
							&cloudrunv2.ServiceTemplateContainerEnvArgs{
								Name:  pulumi.String("FOO"),
								Value: pulumi.String("bar"),
							},
							&cloudrunv2.ServiceTemplateContainerEnvArgs{
								Name: pulumi.String("SECRET_ENV_VAR"),
								ValueSource: &cloudrunv2.ServiceTemplateContainerEnvValueSourceArgs{
									SecretKeyRef: &cloudrunv2.ServiceTemplateContainerEnvValueSourceSecretKeyRefArgs{
										Secret:  secret.SecretId,
										Version: pulumi.String("1"),
									},
								},
							},
						},
						VolumeMounts: cloudrunv2.ServiceTemplateContainerVolumeMountArray{
							&cloudrunv2.ServiceTemplateContainerVolumeMountArgs{
								Name:      pulumi.String("cloudsql"),
								MountPath: pulumi.String("/cloudsql"),
							},
						},
					},
				},
			},
			Traffics: cloudrunv2.ServiceTrafficArray{
				&cloudrunv2.ServiceTrafficArgs{
					Type:    pulumi.String("TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST"),
					Percent: pulumi.Int(100),
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			secret_version_data,
		}))
		if err != nil {
			return err
		}
		project, err := organizations.LookupProject(ctx, nil, nil)
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretIamMember(ctx, "secret-access", &secretmanager.SecretIamMemberArgs{
			SecretId: secret.ID(),
			Role:     pulumi.String("roles/secretmanager.secretAccessor"),
			Member:   pulumi.String(fmt.Sprintf("serviceAccount:%v-compute@developer.gserviceaccount.com", project.Number)),
		}, pulumi.DependsOn([]pulumi.Resource{
			secret,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.secretmanager.Secret;
import com.pulumi.gcp.secretmanager.SecretArgs;
import com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;
import com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;
import com.pulumi.gcp.secretmanager.SecretVersion;
import com.pulumi.gcp.secretmanager.SecretVersionArgs;
import com.pulumi.gcp.sql.DatabaseInstance;
import com.pulumi.gcp.sql.DatabaseInstanceArgs;
import com.pulumi.gcp.sql.inputs.DatabaseInstanceSettingsArgs;
import com.pulumi.gcp.cloudrunv2.Service;
import com.pulumi.gcp.cloudrunv2.ServiceArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTemplateArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTemplateScalingArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTrafficArgs;
import com.pulumi.gcp.organizations.OrganizationsFunctions;
import com.pulumi.gcp.organizations.inputs.GetProjectArgs;
import com.pulumi.gcp.secretmanager.SecretIamMember;
import com.pulumi.gcp.secretmanager.SecretIamMemberArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var secret = new Secret("secret", SecretArgs.builder()        
            .secretId("secret-1")
            .replication(SecretReplicationArgs.builder()
                .auto()
                .build())
            .build());

        var secret_version_data = new SecretVersion("secret-version-data", SecretVersionArgs.builder()        
            .secret(secret.name())
            .secretData("secret-data")
            .build());

        var instance = new DatabaseInstance("instance", DatabaseInstanceArgs.builder()        
            .region("us-central1")
            .databaseVersion("MYSQL_5_7")
            .settings(DatabaseInstanceSettingsArgs.builder()
                .tier("db-f1-micro")
                .build())
            .deletionProtection("true")
            .build());

        var default_ = new Service("default", ServiceArgs.builder()        
            .location("us-central1")
            .ingress("INGRESS_TRAFFIC_ALL")
            .template(ServiceTemplateArgs.builder()
                .scaling(ServiceTemplateScalingArgs.builder()
                    .maxInstanceCount(2)
                    .build())
                .volumes(ServiceTemplateVolumeArgs.builder()
                    .name("cloudsql")
                    .cloudSqlInstance(ServiceTemplateVolumeCloudSqlInstanceArgs.builder()
                        .instances(instance.connectionName())
                        .build())
                    .build())
                .containers(ServiceTemplateContainerArgs.builder()
                    .image("us-docker.pkg.dev/cloudrun/container/hello")
                    .envs(                    
                        ServiceTemplateContainerEnvArgs.builder()
                            .name("FOO")
                            .value("bar")
                            .build(),
                        ServiceTemplateContainerEnvArgs.builder()
                            .name("SECRET_ENV_VAR")
                            .valueSource(ServiceTemplateContainerEnvValueSourceArgs.builder()
                                .secretKeyRef(ServiceTemplateContainerEnvValueSourceSecretKeyRefArgs.builder()
                                    .secret(secret.secretId())
                                    .version("1")
                                    .build())
                                .build())
                            .build())
                    .volumeMounts(ServiceTemplateContainerVolumeMountArgs.builder()
                        .name("cloudsql")
                        .mountPath("/cloudsql")
                        .build())
                    .build())
                .build())
            .traffics(ServiceTrafficArgs.builder()
                .type("TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST")
                .percent(100)
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(secret_version_data)
                .build());

        final var project = OrganizationsFunctions.getProject();

        var secret_access = new SecretIamMember("secret-access", SecretIamMemberArgs.builder()        
            .secretId(secret.id())
            .role("roles/secretmanager.secretAccessor")
            .member(String.format("serviceAccount:%s-compute@developer.gserviceaccount.com", project.applyValue(getProjectResult -> getProjectResult.number())))
            .build(), CustomResourceOptions.builder()
                .dependsOn(secret)
                .build());

    }
}

import pulumi
import pulumi_gcp as gcp

secret = gcp.secretmanager.Secret("secret",
    secret_id="secret-1",
    replication=gcp.secretmanager.SecretReplicationArgs(
        auto=gcp.secretmanager.SecretReplicationAutoArgs(),
    ))
secret_version_data = gcp.secretmanager.SecretVersion("secret-version-data",
    secret=secret.name,
    secret_data="secret-data")
instance = gcp.sql.DatabaseInstance("instance",
    region="us-central1",
    database_version="MYSQL_5_7",
    settings=gcp.sql.DatabaseInstanceSettingsArgs(
        tier="db-f1-micro",
    ),
    deletion_protection=True)
default = gcp.cloudrunv2.Service("default",
    location="us-central1",
    ingress="INGRESS_TRAFFIC_ALL",
    template=gcp.cloudrunv2.ServiceTemplateArgs(
        scaling=gcp.cloudrunv2.ServiceTemplateScalingArgs(
            max_instance_count=2,
        ),
        volumes=[gcp.cloudrunv2.ServiceTemplateVolumeArgs(
            name="cloudsql",
            cloud_sql_instance=gcp.cloudrunv2.ServiceTemplateVolumeCloudSqlInstanceArgs(
                instances=[instance.connection_name],
            ),
        )],
        containers=[gcp.cloudrunv2.ServiceTemplateContainerArgs(
            image="us-docker.pkg.dev/cloudrun/container/hello",
            envs=[
                gcp.cloudrunv2.ServiceTemplateContainerEnvArgs(
                    name="FOO",
                    value="bar",
                ),
                gcp.cloudrunv2.ServiceTemplateContainerEnvArgs(
                    name="SECRET_ENV_VAR",
                    value_source=gcp.cloudrunv2.ServiceTemplateContainerEnvValueSourceArgs(
                        secret_key_ref=gcp.cloudrunv2.ServiceTemplateContainerEnvValueSourceSecretKeyRefArgs(
                            secret=secret.secret_id,
                            version="1",
                        ),
                    ),
                ),
            ],
            volume_mounts=[gcp.cloudrunv2.ServiceTemplateContainerVolumeMountArgs(
                name="cloudsql",
                mount_path="/cloudsql",
            )],
        )],
    ),
    traffics=[gcp.cloudrunv2.ServiceTrafficArgs(
        type="TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST",
        percent=100,
    )],
    opts=pulumi.ResourceOptions(depends_on=[secret_version_data]))
project = gcp.organizations.get_project()
secret_access = gcp.secretmanager.SecretIamMember("secret-access",
    secret_id=secret.id,
    role="roles/secretmanager.secretAccessor",
    member=f"serviceAccount:{project.number}-compute@developer.gserviceaccount.com",
    opts=pulumi.ResourceOptions(depends_on=[secret]))

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const secret = new gcp.secretmanager.Secret("secret", {
    secretId: "secret-1",
    replication: {
        auto: {},
    },
});
const secret_version_data = new gcp.secretmanager.SecretVersion("secret-version-data", {
    secret: secret.name,
    secretData: "secret-data",
});
const instance = new gcp.sql.DatabaseInstance("instance", {
    region: "us-central1",
    databaseVersion: "MYSQL_5_7",
    settings: {
        tier: "db-f1-micro",
    },
    deletionProtection: true,
});
const _default = new gcp.cloudrunv2.Service("default", {
    location: "us-central1",
    ingress: "INGRESS_TRAFFIC_ALL",
    template: {
        scaling: {
            maxInstanceCount: 2,
        },
        volumes: [{
            name: "cloudsql",
            cloudSqlInstance: {
                instances: [instance.connectionName],
            },
        }],
        containers: [{
            image: "us-docker.pkg.dev/cloudrun/container/hello",
            envs: [
                {
                    name: "FOO",
                    value: "bar",
                },
                {
                    name: "SECRET_ENV_VAR",
                    valueSource: {
                        secretKeyRef: {
                            secret: secret.secretId,
                            version: "1",
                        },
                    },
                },
            ],
            volumeMounts: [{
                name: "cloudsql",
                mountPath: "/cloudsql",
            }],
        }],
    },
    traffics: [{
        type: "TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST",
        percent: 100,
    }],
}, {
    dependsOn: [secret_version_data],
});
const project = gcp.organizations.getProject({});
const secret_access = new gcp.secretmanager.SecretIamMember("secret-access", {
    secretId: secret.id,
    role: "roles/secretmanager.secretAccessor",
    member: project.then(project => `serviceAccount:${project.number}-compute@developer.gserviceaccount.com`),
}, {
    dependsOn: [secret],
});

resources:
  default:
    type: gcp:cloudrunv2:Service
    properties:
      location: us-central1
      ingress: INGRESS_TRAFFIC_ALL
      template:
        scaling:
          maxInstanceCount: 2
        volumes:
          - name: cloudsql
            cloudSqlInstance:
              instances:
                - ${instance.connectionName}
        containers:
          - image: us-docker.pkg.dev/cloudrun/container/hello
            envs:
              - name: FOO
                value: bar
              - name: SECRET_ENV_VAR
                valueSource:
                  secretKeyRef:
                    secret: ${secret.secretId}
                    version: '1'
            volumeMounts:
              - name: cloudsql
                mountPath: /cloudsql
      traffics:
        - type: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST
          percent: 100
    options:
      dependson:
        - ${["secret-version-data"]}
  secret:
    type: gcp:secretmanager:Secret
    properties:
      secretId: secret-1
      replication:
        auto: {}
  secret-version-data:
    type: gcp:secretmanager:SecretVersion
    properties:
      secret: ${secret.name}
      secretData: secret-data
  secret-access:
    type: gcp:secretmanager:SecretIamMember
    properties:
      secretId: ${secret.id}
      role: roles/secretmanager.secretAccessor
      member: serviceAccount:${project.number}-compute@developer.gserviceaccount.com
    options:
      dependson:
        - ${secret}
  instance:
    type: gcp:sql:DatabaseInstance
    properties:
      region: us-central1
      databaseVersion: MYSQL_5_7
      settings:
        tier: db-f1-micro
      deletionProtection: 'true'
variables:
  project:
    fn::invoke:
      Function: gcp:organizations:getProject
      Arguments: {}

Cloudrunv2 Service Vpcaccess

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var customTestNetwork = new Gcp.Compute.Network("customTestNetwork", new()
    {
        AutoCreateSubnetworks = false,
    });

    var customTestSubnetwork = new Gcp.Compute.Subnetwork("customTestSubnetwork", new()
    {
        IpCidrRange = "10.2.0.0/28",
        Region = "us-central1",
        Network = customTestNetwork.Id,
    });

    var connector = new Gcp.VpcAccess.Connector("connector", new()
    {
        Subnet = new Gcp.VpcAccess.Inputs.ConnectorSubnetArgs
        {
            Name = customTestSubnetwork.Name,
        },
        MachineType = "e2-standard-4",
        MinInstances = 2,
        MaxInstances = 3,
        Region = "us-central1",
    });

    var @default = new Gcp.CloudRunV2.Service("default", new()
    {
        Location = "us-central1",
        Template = new Gcp.CloudRunV2.Inputs.ServiceTemplateArgs
        {
            Containers = new[]
            {
                new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerArgs
                {
                    Image = "us-docker.pkg.dev/cloudrun/container/hello",
                },
            },
            VpcAccess = new Gcp.CloudRunV2.Inputs.ServiceTemplateVpcAccessArgs
            {
                Connector = connector.Id,
                Egress = "ALL_TRAFFIC",
            },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/cloudrunv2"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/compute"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/vpcaccess"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		customTestNetwork, err := compute.NewNetwork(ctx, "customTestNetwork", &compute.NetworkArgs{
			AutoCreateSubnetworks: pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		customTestSubnetwork, err := compute.NewSubnetwork(ctx, "customTestSubnetwork", &compute.SubnetworkArgs{
			IpCidrRange: pulumi.String("10.2.0.0/28"),
			Region:      pulumi.String("us-central1"),
			Network:     customTestNetwork.ID(),
		})
		if err != nil {
			return err
		}
		connector, err := vpcaccess.NewConnector(ctx, "connector", &vpcaccess.ConnectorArgs{
			Subnet: &vpcaccess.ConnectorSubnetArgs{
				Name: customTestSubnetwork.Name,
			},
			MachineType:  pulumi.String("e2-standard-4"),
			MinInstances: pulumi.Int(2),
			MaxInstances: pulumi.Int(3),
			Region:       pulumi.String("us-central1"),
		})
		if err != nil {
			return err
		}
		_, err = cloudrunv2.NewService(ctx, "default", &cloudrunv2.ServiceArgs{
			Location: pulumi.String("us-central1"),
			Template: &cloudrunv2.ServiceTemplateArgs{
				Containers: cloudrunv2.ServiceTemplateContainerArray{
					&cloudrunv2.ServiceTemplateContainerArgs{
						Image: pulumi.String("us-docker.pkg.dev/cloudrun/container/hello"),
					},
				},
				VpcAccess: &cloudrunv2.ServiceTemplateVpcAccessArgs{
					Connector: connector.ID(),
					Egress:    pulumi.String("ALL_TRAFFIC"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.Network;
import com.pulumi.gcp.compute.NetworkArgs;
import com.pulumi.gcp.compute.Subnetwork;
import com.pulumi.gcp.compute.SubnetworkArgs;
import com.pulumi.gcp.vpcaccess.Connector;
import com.pulumi.gcp.vpcaccess.ConnectorArgs;
import com.pulumi.gcp.vpcaccess.inputs.ConnectorSubnetArgs;
import com.pulumi.gcp.cloudrunv2.Service;
import com.pulumi.gcp.cloudrunv2.ServiceArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTemplateArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTemplateVpcAccessArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var customTestNetwork = new Network("customTestNetwork", NetworkArgs.builder()        
            .autoCreateSubnetworks(false)
            .build());

        var customTestSubnetwork = new Subnetwork("customTestSubnetwork", SubnetworkArgs.builder()        
            .ipCidrRange("10.2.0.0/28")
            .region("us-central1")
            .network(customTestNetwork.id())
            .build());

        var connector = new Connector("connector", ConnectorArgs.builder()        
            .subnet(ConnectorSubnetArgs.builder()
                .name(customTestSubnetwork.name())
                .build())
            .machineType("e2-standard-4")
            .minInstances(2)
            .maxInstances(3)
            .region("us-central1")
            .build());

        var default_ = new Service("default", ServiceArgs.builder()        
            .location("us-central1")
            .template(ServiceTemplateArgs.builder()
                .containers(ServiceTemplateContainerArgs.builder()
                    .image("us-docker.pkg.dev/cloudrun/container/hello")
                    .build())
                .vpcAccess(ServiceTemplateVpcAccessArgs.builder()
                    .connector(connector.id())
                    .egress("ALL_TRAFFIC")
                    .build())
                .build())
            .build());

    }
}

import pulumi
import pulumi_gcp as gcp

custom_test_network = gcp.compute.Network("customTestNetwork", auto_create_subnetworks=False)
custom_test_subnetwork = gcp.compute.Subnetwork("customTestSubnetwork",
    ip_cidr_range="10.2.0.0/28",
    region="us-central1",
    network=custom_test_network.id)
connector = gcp.vpcaccess.Connector("connector",
    subnet=gcp.vpcaccess.ConnectorSubnetArgs(
        name=custom_test_subnetwork.name,
    ),
    machine_type="e2-standard-4",
    min_instances=2,
    max_instances=3,
    region="us-central1")
default = gcp.cloudrunv2.Service("default",
    location="us-central1",
    template=gcp.cloudrunv2.ServiceTemplateArgs(
        containers=[gcp.cloudrunv2.ServiceTemplateContainerArgs(
            image="us-docker.pkg.dev/cloudrun/container/hello",
        )],
        vpc_access=gcp.cloudrunv2.ServiceTemplateVpcAccessArgs(
            connector=connector.id,
            egress="ALL_TRAFFIC",
        ),
    ))

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const customTestNetwork = new gcp.compute.Network("customTestNetwork", {autoCreateSubnetworks: false});
const customTestSubnetwork = new gcp.compute.Subnetwork("customTestSubnetwork", {
    ipCidrRange: "10.2.0.0/28",
    region: "us-central1",
    network: customTestNetwork.id,
});
const connector = new gcp.vpcaccess.Connector("connector", {
    subnet: {
        name: customTestSubnetwork.name,
    },
    machineType: "e2-standard-4",
    minInstances: 2,
    maxInstances: 3,
    region: "us-central1",
});
const _default = new gcp.cloudrunv2.Service("default", {
    location: "us-central1",
    template: {
        containers: [{
            image: "us-docker.pkg.dev/cloudrun/container/hello",
        }],
        vpcAccess: {
            connector: connector.id,
            egress: "ALL_TRAFFIC",
        },
    },
});

resources:
  default:
    type: gcp:cloudrunv2:Service
    properties:
      location: us-central1
      template:
        containers:
          - image: us-docker.pkg.dev/cloudrun/container/hello
        vpcAccess:
          connector: ${connector.id}
          egress: ALL_TRAFFIC
  connector:
    type: gcp:vpcaccess:Connector
    properties:
      subnet:
        name: ${customTestSubnetwork.name}
      machineType: e2-standard-4
      minInstances: 2
      maxInstances: 3
      region: us-central1
  customTestSubnetwork:
    type: gcp:compute:Subnetwork
    properties:
      ipCidrRange: 10.2.0.0/28
      region: us-central1
      network: ${customTestNetwork.id}
  customTestNetwork:
    type: gcp:compute:Network
    properties:
      autoCreateSubnetworks: false

Cloudrunv2 Service Directvpc

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var @default = new Gcp.CloudRunV2.Service("default", new()
    {
        LaunchStage = "BETA",
        Location = "us-central1",
        Template = new Gcp.CloudRunV2.Inputs.ServiceTemplateArgs
        {
            Containers = new[]
            {
                new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerArgs
                {
                    Image = "us-docker.pkg.dev/cloudrun/container/hello",
                },
            },
            VpcAccess = new Gcp.CloudRunV2.Inputs.ServiceTemplateVpcAccessArgs
            {
                Egress = "ALL_TRAFFIC",
                NetworkInterfaces = new[]
                {
                    new Gcp.CloudRunV2.Inputs.ServiceTemplateVpcAccessNetworkInterfaceArgs
                    {
                        Network = "default",
                        Subnetwork = "default",
                        Tags = new[]
                        {
                            "tag1",
                            "tag2",
                            "tag3",
                        },
                    },
                },
            },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/cloudrunv2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudrunv2.NewService(ctx, "default", &cloudrunv2.ServiceArgs{
			LaunchStage: pulumi.String("BETA"),
			Location:    pulumi.String("us-central1"),
			Template: &cloudrunv2.ServiceTemplateArgs{
				Containers: cloudrunv2.ServiceTemplateContainerArray{
					&cloudrunv2.ServiceTemplateContainerArgs{
						Image: pulumi.String("us-docker.pkg.dev/cloudrun/container/hello"),
					},
				},
				VpcAccess: &cloudrunv2.ServiceTemplateVpcAccessArgs{
					Egress: pulumi.String("ALL_TRAFFIC"),
					NetworkInterfaces: cloudrunv2.ServiceTemplateVpcAccessNetworkInterfaceArray{
						&cloudrunv2.ServiceTemplateVpcAccessNetworkInterfaceArgs{
							Network:    pulumi.String("default"),
							Subnetwork: pulumi.String("default"),
							Tags: pulumi.StringArray{
								pulumi.String("tag1"),
								pulumi.String("tag2"),
								pulumi.String("tag3"),
							},
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.cloudrunv2.Service;
import com.pulumi.gcp.cloudrunv2.ServiceArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTemplateArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTemplateVpcAccessArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var default_ = new Service("default", ServiceArgs.builder()        
            .launchStage("BETA")
            .location("us-central1")
            .template(ServiceTemplateArgs.builder()
                .containers(ServiceTemplateContainerArgs.builder()
                    .image("us-docker.pkg.dev/cloudrun/container/hello")
                    .build())
                .vpcAccess(ServiceTemplateVpcAccessArgs.builder()
                    .egress("ALL_TRAFFIC")
                    .networkInterfaces(ServiceTemplateVpcAccessNetworkInterfaceArgs.builder()
                        .network("default")
                        .subnetwork("default")
                        .tags(                        
                            "tag1",
                            "tag2",
                            "tag3")
                        .build())
                    .build())
                .build())
            .build());

    }
}

import pulumi
import pulumi_gcp as gcp

default = gcp.cloudrunv2.Service("default",
    launch_stage="BETA",
    location="us-central1",
    template=gcp.cloudrunv2.ServiceTemplateArgs(
        containers=[gcp.cloudrunv2.ServiceTemplateContainerArgs(
            image="us-docker.pkg.dev/cloudrun/container/hello",
        )],
        vpc_access=gcp.cloudrunv2.ServiceTemplateVpcAccessArgs(
            egress="ALL_TRAFFIC",
            network_interfaces=[gcp.cloudrunv2.ServiceTemplateVpcAccessNetworkInterfaceArgs(
                network="default",
                subnetwork="default",
                tags=[
                    "tag1",
                    "tag2",
                    "tag3",
                ],
            )],
        ),
    ))

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const _default = new gcp.cloudrunv2.Service("default", {
    launchStage: "BETA",
    location: "us-central1",
    template: {
        containers: [{
            image: "us-docker.pkg.dev/cloudrun/container/hello",
        }],
        vpcAccess: {
            egress: "ALL_TRAFFIC",
            networkInterfaces: [{
                network: "default",
                subnetwork: "default",
                tags: [
                    "tag1",
                    "tag2",
                    "tag3",
                ],
            }],
        },
    },
});

resources:
  default:
    type: gcp:cloudrunv2:Service
    properties:
      launchStage: BETA
      location: us-central1
      template:
        containers:
          - image: us-docker.pkg.dev/cloudrun/container/hello
        vpcAccess:
          egress: ALL_TRAFFIC
          networkInterfaces:
            - network: default
              subnetwork: default
              tags:
                - tag1
                - tag2
                - tag3

Cloudrunv2 Service Probes

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var @default = new Gcp.CloudRunV2.Service("default", new()
    {
        Location = "us-central1",
        Template = new Gcp.CloudRunV2.Inputs.ServiceTemplateArgs
        {
            Containers = new[]
            {
                new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerArgs
                {
                    Image = "us-docker.pkg.dev/cloudrun/container/hello",
                    LivenessProbe = new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerLivenessProbeArgs
                    {
                        HttpGet = new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerLivenessProbeHttpGetArgs
                        {
                            Path = "/",
                        },
                    },
                    StartupProbe = new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerStartupProbeArgs
                    {
                        FailureThreshold = 1,
                        InitialDelaySeconds = 0,
                        PeriodSeconds = 3,
                        TcpSocket = new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerStartupProbeTcpSocketArgs
                        {
                            Port = 8080,
                        },
                        TimeoutSeconds = 1,
                    },
                },
            },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/cloudrunv2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudrunv2.NewService(ctx, "default", &cloudrunv2.ServiceArgs{
			Location: pulumi.String("us-central1"),
			Template: &cloudrunv2.ServiceTemplateArgs{
				Containers: cloudrunv2.ServiceTemplateContainerArray{
					&cloudrunv2.ServiceTemplateContainerArgs{
						Image: pulumi.String("us-docker.pkg.dev/cloudrun/container/hello"),
						LivenessProbe: &cloudrunv2.ServiceTemplateContainerLivenessProbeArgs{
							HttpGet: &cloudrunv2.ServiceTemplateContainerLivenessProbeHttpGetArgs{
								Path: pulumi.String("/"),
							},
						},
						StartupProbe: &cloudrunv2.ServiceTemplateContainerStartupProbeArgs{
							FailureThreshold:    pulumi.Int(1),
							InitialDelaySeconds: pulumi.Int(0),
							PeriodSeconds:       pulumi.Int(3),
							TcpSocket: &cloudrunv2.ServiceTemplateContainerStartupProbeTcpSocketArgs{
								Port: pulumi.Int(8080),
							},
							TimeoutSeconds: pulumi.Int(1),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.cloudrunv2.Service;
import com.pulumi.gcp.cloudrunv2.ServiceArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTemplateArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var default_ = new Service("default", ServiceArgs.builder()        
            .location("us-central1")
            .template(ServiceTemplateArgs.builder()
                .containers(ServiceTemplateContainerArgs.builder()
                    .image("us-docker.pkg.dev/cloudrun/container/hello")
                    .livenessProbe(ServiceTemplateContainerLivenessProbeArgs.builder()
                        .httpGet(ServiceTemplateContainerLivenessProbeHttpGetArgs.builder()
                            .path("/")
                            .build())
                        .build())
                    .startupProbe(ServiceTemplateContainerStartupProbeArgs.builder()
                        .failureThreshold(1)
                        .initialDelaySeconds(0)
                        .periodSeconds(3)
                        .tcpSocket(ServiceTemplateContainerStartupProbeTcpSocketArgs.builder()
                            .port(8080)
                            .build())
                        .timeoutSeconds(1)
                        .build())
                    .build())
                .build())
            .build());

    }
}

import pulumi
import pulumi_gcp as gcp

default = gcp.cloudrunv2.Service("default",
    location="us-central1",
    template=gcp.cloudrunv2.ServiceTemplateArgs(
        containers=[gcp.cloudrunv2.ServiceTemplateContainerArgs(
            image="us-docker.pkg.dev/cloudrun/container/hello",
            liveness_probe=gcp.cloudrunv2.ServiceTemplateContainerLivenessProbeArgs(
                http_get=gcp.cloudrunv2.ServiceTemplateContainerLivenessProbeHttpGetArgs(
                    path="/",
                ),
            ),
            startup_probe=gcp.cloudrunv2.ServiceTemplateContainerStartupProbeArgs(
                failure_threshold=1,
                initial_delay_seconds=0,
                period_seconds=3,
                tcp_socket=gcp.cloudrunv2.ServiceTemplateContainerStartupProbeTcpSocketArgs(
                    port=8080,
                ),
                timeout_seconds=1,
            ),
        )],
    ))

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const _default = new gcp.cloudrunv2.Service("default", {
    location: "us-central1",
    template: {
        containers: [{
            image: "us-docker.pkg.dev/cloudrun/container/hello",
            livenessProbe: {
                httpGet: {
                    path: "/",
                },
            },
            startupProbe: {
                failureThreshold: 1,
                initialDelaySeconds: 0,
                periodSeconds: 3,
                tcpSocket: {
                    port: 8080,
                },
                timeoutSeconds: 1,
            },
        }],
    },
});

resources:
  default:
    type: gcp:cloudrunv2:Service
    properties:
      location: us-central1
      template:
        containers:
          - image: us-docker.pkg.dev/cloudrun/container/hello
            livenessProbe:
              httpGet:
                path: /
            startupProbe:
              failureThreshold: 1
              initialDelaySeconds: 0
              periodSeconds: 3
              tcpSocket:
                port: 8080
              timeoutSeconds: 1

Cloudrunv2 Service Secret

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var secret = new Gcp.SecretManager.Secret("secret", new()
    {
        SecretId = "secret-1",
        Replication = new Gcp.SecretManager.Inputs.SecretReplicationArgs
        {
            Auto = null,
        },
    });

    var secret_version_data = new Gcp.SecretManager.SecretVersion("secret-version-data", new()
    {
        Secret = secret.Name,
        SecretData = "secret-data",
    });

    var @default = new Gcp.CloudRunV2.Service("default", new()
    {
        Location = "us-central1",
        Ingress = "INGRESS_TRAFFIC_ALL",
        Template = new Gcp.CloudRunV2.Inputs.ServiceTemplateArgs
        {
            Volumes = new[]
            {
                new Gcp.CloudRunV2.Inputs.ServiceTemplateVolumeArgs
                {
                    Name = "a-volume",
                    Secret = new Gcp.CloudRunV2.Inputs.ServiceTemplateVolumeSecretArgs
                    {
                        Secret = secret.SecretId,
                        DefaultMode = 292,
                        Items = new[]
                        {
                            new Gcp.CloudRunV2.Inputs.ServiceTemplateVolumeSecretItemArgs
                            {
                                Version = "1",
                                Path = "my-secret",
                            },
                        },
                    },
                },
            },
            Containers = new[]
            {
                new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerArgs
                {
                    Image = "us-docker.pkg.dev/cloudrun/container/hello",
                    VolumeMounts = new[]
                    {
                        new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerVolumeMountArgs
                        {
                            Name = "a-volume",
                            MountPath = "/secrets",
                        },
                    },
                },
            },
        },
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            secret_version_data,
        },
    });

    var project = Gcp.Organizations.GetProject.Invoke();

    var secret_access = new Gcp.SecretManager.SecretIamMember("secret-access", new()
    {
        SecretId = secret.Id,
        Role = "roles/secretmanager.secretAccessor",
        Member = $"serviceAccount:{project.Apply(getProjectResult => getProjectResult.Number)}-compute@developer.gserviceaccount.com",
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            secret,
        },
    });

});

package main

import (
	"fmt"

	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/cloudrunv2"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/organizations"
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/secretmanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		secret, err := secretmanager.NewSecret(ctx, "secret", &secretmanager.SecretArgs{
			SecretId: pulumi.String("secret-1"),
			Replication: &secretmanager.SecretReplicationArgs{
				Auto: nil,
			},
		})
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretVersion(ctx, "secret-version-data", &secretmanager.SecretVersionArgs{
			Secret:     secret.Name,
			SecretData: pulumi.String("secret-data"),
		})
		if err != nil {
			return err
		}
		_, err = cloudrunv2.NewService(ctx, "default", &cloudrunv2.ServiceArgs{
			Location: pulumi.String("us-central1"),
			Ingress:  pulumi.String("INGRESS_TRAFFIC_ALL"),
			Template: &cloudrunv2.ServiceTemplateArgs{
				Volumes: cloudrunv2.ServiceTemplateVolumeArray{
					&cloudrunv2.ServiceTemplateVolumeArgs{
						Name: pulumi.String("a-volume"),
						Secret: &cloudrunv2.ServiceTemplateVolumeSecretArgs{
							Secret:      secret.SecretId,
							DefaultMode: pulumi.Int(292),
							Items: cloudrunv2.ServiceTemplateVolumeSecretItemArray{
								&cloudrunv2.ServiceTemplateVolumeSecretItemArgs{
									Version: pulumi.String("1"),
									Path:    pulumi.String("my-secret"),
								},
							},
						},
					},
				},
				Containers: cloudrunv2.ServiceTemplateContainerArray{
					&cloudrunv2.ServiceTemplateContainerArgs{
						Image: pulumi.String("us-docker.pkg.dev/cloudrun/container/hello"),
						VolumeMounts: cloudrunv2.ServiceTemplateContainerVolumeMountArray{
							&cloudrunv2.ServiceTemplateContainerVolumeMountArgs{
								Name:      pulumi.String("a-volume"),
								MountPath: pulumi.String("/secrets"),
							},
						},
					},
				},
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			secret_version_data,
		}))
		if err != nil {
			return err
		}
		project, err := organizations.LookupProject(ctx, nil, nil)
		if err != nil {
			return err
		}
		_, err = secretmanager.NewSecretIamMember(ctx, "secret-access", &secretmanager.SecretIamMemberArgs{
			SecretId: secret.ID(),
			Role:     pulumi.String("roles/secretmanager.secretAccessor"),
			Member:   pulumi.String(fmt.Sprintf("serviceAccount:%v-compute@developer.gserviceaccount.com", project.Number)),
		}, pulumi.DependsOn([]pulumi.Resource{
			secret,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.secretmanager.Secret;
import com.pulumi.gcp.secretmanager.SecretArgs;
import com.pulumi.gcp.secretmanager.inputs.SecretReplicationArgs;
import com.pulumi.gcp.secretmanager.inputs.SecretReplicationAutoArgs;
import com.pulumi.gcp.secretmanager.SecretVersion;
import com.pulumi.gcp.secretmanager.SecretVersionArgs;
import com.pulumi.gcp.cloudrunv2.Service;
import com.pulumi.gcp.cloudrunv2.ServiceArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTemplateArgs;
import com.pulumi.gcp.organizations.OrganizationsFunctions;
import com.pulumi.gcp.organizations.inputs.GetProjectArgs;
import com.pulumi.gcp.secretmanager.SecretIamMember;
import com.pulumi.gcp.secretmanager.SecretIamMemberArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var secret = new Secret("secret", SecretArgs.builder()        
            .secretId("secret-1")
            .replication(SecretReplicationArgs.builder()
                .auto()
                .build())
            .build());

        var secret_version_data = new SecretVersion("secret-version-data", SecretVersionArgs.builder()        
            .secret(secret.name())
            .secretData("secret-data")
            .build());

        var default_ = new Service("default", ServiceArgs.builder()        
            .location("us-central1")
            .ingress("INGRESS_TRAFFIC_ALL")
            .template(ServiceTemplateArgs.builder()
                .volumes(ServiceTemplateVolumeArgs.builder()
                    .name("a-volume")
                    .secret(ServiceTemplateVolumeSecretArgs.builder()
                        .secret(secret.secretId())
                        .defaultMode(292)
                        .items(ServiceTemplateVolumeSecretItemArgs.builder()
                            .version("1")
                            .path("my-secret")
                            .build())
                        .build())
                    .build())
                .containers(ServiceTemplateContainerArgs.builder()
                    .image("us-docker.pkg.dev/cloudrun/container/hello")
                    .volumeMounts(ServiceTemplateContainerVolumeMountArgs.builder()
                        .name("a-volume")
                        .mountPath("/secrets")
                        .build())
                    .build())
                .build())
            .build(), CustomResourceOptions.builder()
                .dependsOn(secret_version_data)
                .build());

        final var project = OrganizationsFunctions.getProject();

        var secret_access = new SecretIamMember("secret-access", SecretIamMemberArgs.builder()        
            .secretId(secret.id())
            .role("roles/secretmanager.secretAccessor")
            .member(String.format("serviceAccount:%s-compute@developer.gserviceaccount.com", project.applyValue(getProjectResult -> getProjectResult.number())))
            .build(), CustomResourceOptions.builder()
                .dependsOn(secret)
                .build());

    }
}

import pulumi
import pulumi_gcp as gcp

secret = gcp.secretmanager.Secret("secret",
    secret_id="secret-1",
    replication=gcp.secretmanager.SecretReplicationArgs(
        auto=gcp.secretmanager.SecretReplicationAutoArgs(),
    ))
secret_version_data = gcp.secretmanager.SecretVersion("secret-version-data",
    secret=secret.name,
    secret_data="secret-data")
default = gcp.cloudrunv2.Service("default",
    location="us-central1",
    ingress="INGRESS_TRAFFIC_ALL",
    template=gcp.cloudrunv2.ServiceTemplateArgs(
        volumes=[gcp.cloudrunv2.ServiceTemplateVolumeArgs(
            name="a-volume",
            secret=gcp.cloudrunv2.ServiceTemplateVolumeSecretArgs(
                secret=secret.secret_id,
                default_mode=292,
                items=[gcp.cloudrunv2.ServiceTemplateVolumeSecretItemArgs(
                    version="1",
                    path="my-secret",
                )],
            ),
        )],
        containers=[gcp.cloudrunv2.ServiceTemplateContainerArgs(
            image="us-docker.pkg.dev/cloudrun/container/hello",
            volume_mounts=[gcp.cloudrunv2.ServiceTemplateContainerVolumeMountArgs(
                name="a-volume",
                mount_path="/secrets",
            )],
        )],
    ),
    opts=pulumi.ResourceOptions(depends_on=[secret_version_data]))
project = gcp.organizations.get_project()
secret_access = gcp.secretmanager.SecretIamMember("secret-access",
    secret_id=secret.id,
    role="roles/secretmanager.secretAccessor",
    member=f"serviceAccount:{project.number}-compute@developer.gserviceaccount.com",
    opts=pulumi.ResourceOptions(depends_on=[secret]))

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const secret = new gcp.secretmanager.Secret("secret", {
    secretId: "secret-1",
    replication: {
        auto: {},
    },
});
const secret_version_data = new gcp.secretmanager.SecretVersion("secret-version-data", {
    secret: secret.name,
    secretData: "secret-data",
});
const _default = new gcp.cloudrunv2.Service("default", {
    location: "us-central1",
    ingress: "INGRESS_TRAFFIC_ALL",
    template: {
        volumes: [{
            name: "a-volume",
            secret: {
                secret: secret.secretId,
                defaultMode: 292,
                items: [{
                    version: "1",
                    path: "my-secret",
                }],
            },
        }],
        containers: [{
            image: "us-docker.pkg.dev/cloudrun/container/hello",
            volumeMounts: [{
                name: "a-volume",
                mountPath: "/secrets",
            }],
        }],
    },
}, {
    dependsOn: [secret_version_data],
});
const project = gcp.organizations.getProject({});
const secret_access = new gcp.secretmanager.SecretIamMember("secret-access", {
    secretId: secret.id,
    role: "roles/secretmanager.secretAccessor",
    member: project.then(project => `serviceAccount:${project.number}-compute@developer.gserviceaccount.com`),
}, {
    dependsOn: [secret],
});

resources:
  default:
    type: gcp:cloudrunv2:Service
    properties:
      location: us-central1
      ingress: INGRESS_TRAFFIC_ALL
      template:
        volumes:
          - name: a-volume
            secret:
              secret: ${secret.secretId}
              defaultMode: 292
              items:
                - version: '1'
                  path: my-secret
        containers:
          - image: us-docker.pkg.dev/cloudrun/container/hello
            volumeMounts:
              - name: a-volume
                mountPath: /secrets
    options:
      dependson:
        - ${["secret-version-data"]}
  secret:
    type: gcp:secretmanager:Secret
    properties:
      secretId: secret-1
      replication:
        auto: {}
  secret-version-data:
    type: gcp:secretmanager:SecretVersion
    properties:
      secret: ${secret.name}
      secretData: secret-data
  secret-access:
    type: gcp:secretmanager:SecretIamMember
    properties:
      secretId: ${secret.id}
      role: roles/secretmanager.secretAccessor
      member: serviceAccount:${project.number}-compute@developer.gserviceaccount.com
    options:
      dependson:
        - ${secret}
variables:
  project:
    fn::invoke:
      Function: gcp:organizations:getProject
      Arguments: {}

Cloudrunv2 Service Multicontainer

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var @default = new Gcp.CloudRunV2.Service("default", new()
    {
        Location = "us-central1",
        LaunchStage = "BETA",
        Ingress = "INGRESS_TRAFFIC_ALL",
        Template = new Gcp.CloudRunV2.Inputs.ServiceTemplateArgs
        {
            Containers = new[]
            {
                new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerArgs
                {
                    Name = "hello-1",
                    Ports = new[]
                    {
                        new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerPortArgs
                        {
                            ContainerPort = 8080,
                        },
                    },
                    Image = "us-docker.pkg.dev/cloudrun/container/hello",
                    DependsOns = new[]
                    {
                        "hello-2",
                    },
                    VolumeMounts = new[]
                    {
                        new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerVolumeMountArgs
                        {
                            Name = "empty-dir-volume",
                            MountPath = "/mnt",
                        },
                    },
                },
                new Gcp.CloudRunV2.Inputs.ServiceTemplateContainerArgs
                {
                    Name = "hello-2",
                    Image = "us-docker.pkg.dev/cloudrun/container/hello",
                },
            },
            Volumes = new[]
            {
                new Gcp.CloudRunV2.Inputs.ServiceTemplateVolumeArgs
                {
                    Name = "empty-dir-volume",
                    EmptyDir = new Gcp.CloudRunV2.Inputs.ServiceTemplateVolumeEmptyDirArgs
                    {
                        Medium = "MEMORY",
                        SizeLimit = "256Mi",
                    },
                },
            },
        },
    }, new CustomResourceOptions
    {
        Provider = google_beta,
    });

});

package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v6/go/gcp/cloudrunv2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudrunv2.NewService(ctx, "default", &cloudrunv2.ServiceArgs{
			Location:    pulumi.String("us-central1"),
			LaunchStage: pulumi.String("BETA"),
			Ingress:     pulumi.String("INGRESS_TRAFFIC_ALL"),
			Template: &cloudrunv2.ServiceTemplateArgs{
				Containers: cloudrunv2.ServiceTemplateContainerArray{
					&cloudrunv2.ServiceTemplateContainerArgs{
						Name: pulumi.String("hello-1"),
						Ports: cloudrunv2.ServiceTemplateContainerPortArray{
							&cloudrunv2.ServiceTemplateContainerPortArgs{
								ContainerPort: pulumi.Int(8080),
							},
						},
						Image: pulumi.String("us-docker.pkg.dev/cloudrun/container/hello"),
						DependsOns: pulumi.StringArray{
							pulumi.String("hello-2"),
						},
						VolumeMounts: cloudrunv2.ServiceTemplateContainerVolumeMountArray{
							&cloudrunv2.ServiceTemplateContainerVolumeMountArgs{
								Name:      pulumi.String("empty-dir-volume"),
								MountPath: pulumi.String("/mnt"),
							},
						},
					},
					&cloudrunv2.ServiceTemplateContainerArgs{
						Name:  pulumi.String("hello-2"),
						Image: pulumi.String("us-docker.pkg.dev/cloudrun/container/hello"),
					},
				},
				Volumes: cloudrunv2.ServiceTemplateVolumeArray{
					&cloudrunv2.ServiceTemplateVolumeArgs{
						Name: pulumi.String("empty-dir-volume"),
						EmptyDir: &cloudrunv2.ServiceTemplateVolumeEmptyDirArgs{
							Medium:    pulumi.String("MEMORY"),
							SizeLimit: pulumi.String("256Mi"),
						},
					},
				},
			},
		}, pulumi.Provider(google_beta))
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.cloudrunv2.Service;
import com.pulumi.gcp.cloudrunv2.ServiceArgs;
import com.pulumi.gcp.cloudrunv2.inputs.ServiceTemplateArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var default_ = new Service("default", ServiceArgs.builder()        
            .location("us-central1")
            .launchStage("BETA")
            .ingress("INGRESS_TRAFFIC_ALL")
            .template(ServiceTemplateArgs.builder()
                .containers(                
                    ServiceTemplateContainerArgs.builder()
                        .name("hello-1")
                        .ports(ServiceTemplateContainerPortArgs.builder()
                            .containerPort(8080)
                            .build())
                        .image("us-docker.pkg.dev/cloudrun/container/hello")
                        .dependsOns("hello-2")
                        .volumeMounts(ServiceTemplateContainerVolumeMountArgs.builder()
                            .name("empty-dir-volume")
                            .mountPath("/mnt")
                            .build())
                        .build(),
                    ServiceTemplateContainerArgs.builder()
                        .name("hello-2")
                        .image("us-docker.pkg.dev/cloudrun/container/hello")
                        .build())
                .volumes(ServiceTemplateVolumeArgs.builder()
                    .name("empty-dir-volume")
                    .emptyDir(ServiceTemplateVolumeEmptyDirArgs.builder()
                        .medium("MEMORY")
                        .sizeLimit("256Mi")
                        .build())
                    .build())
                .build())
            .build(), CustomResourceOptions.builder()
                .provider(google_beta)
                .build());

    }
}

import pulumi
import pulumi_gcp as gcp

default = gcp.cloudrunv2.Service("default",
    location="us-central1",
    launch_stage="BETA",
    ingress="INGRESS_TRAFFIC_ALL",
    template=gcp.cloudrunv2.ServiceTemplateArgs(
        containers=[
            gcp.cloudrunv2.ServiceTemplateContainerArgs(
                name="hello-1",
                ports=[gcp.cloudrunv2.ServiceTemplateContainerPortArgs(
                    container_port=8080,
                )],
                image="us-docker.pkg.dev/cloudrun/container/hello",
                depends_ons=["hello-2"],
                volume_mounts=[gcp.cloudrunv2.ServiceTemplateContainerVolumeMountArgs(
                    name="empty-dir-volume",
                    mount_path="/mnt",
                )],
            ),
            gcp.cloudrunv2.ServiceTemplateContainerArgs(
                name="hello-2",
                image="us-docker.pkg.dev/cloudrun/container/hello",
            ),
        ],
        volumes=[gcp.cloudrunv2.ServiceTemplateVolumeArgs(
            name="empty-dir-volume",
            empty_dir=gcp.cloudrunv2.ServiceTemplateVolumeEmptyDirArgs(
                medium="MEMORY",
                size_limit="256Mi",
            ),
        )],
    ),
    opts=pulumi.ResourceOptions(provider=google_beta))

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const _default = new gcp.cloudrunv2.Service("default", {
    location: "us-central1",
    launchStage: "BETA",
    ingress: "INGRESS_TRAFFIC_ALL",
    template: {
        containers: [
            {
                name: "hello-1",
                ports: [{
                    containerPort: 8080,
                }],
                image: "us-docker.pkg.dev/cloudrun/container/hello",
                dependsOns: ["hello-2"],
                volumeMounts: [{
                    name: "empty-dir-volume",
                    mountPath: "/mnt",
                }],
            },
            {
                name: "hello-2",
                image: "us-docker.pkg.dev/cloudrun/container/hello",
            },
        ],
        volumes: [{
            name: "empty-dir-volume",
            emptyDir: {
                medium: "MEMORY",
                sizeLimit: "256Mi",
            },
        }],
    },
}, {
    provider: google_beta,
});

resources:
  default:
    type: gcp:cloudrunv2:Service
    properties:
      location: us-central1
      launchStage: BETA
      ingress: INGRESS_TRAFFIC_ALL
      template:
        containers:
          - name: hello-1
            ports:
              - containerPort: 8080
            image: us-docker.pkg.dev/cloudrun/container/hello
            dependsOns:
              - hello-2
            volumeMounts:
              - name: empty-dir-volume
                mountPath: /mnt
          - name: hello-2
            image: us-docker.pkg.dev/cloudrun/container/hello
        volumes:
          - name: empty-dir-volume
            emptyDir:
              medium: MEMORY
              sizeLimit: 256Mi
    options:
      provider: ${["google-beta"]}

Create Service Resource

new Service(name: string, args: ServiceArgs, opts?: CustomResourceOptions);

@overload
def Service(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            annotations: Optional[Mapping[str, str]] = None,
            binary_authorization: Optional[ServiceBinaryAuthorizationArgs] = None,
            client: Optional[str] = None,
            client_version: Optional[str] = None,
            custom_audiences: Optional[Sequence[str]] = None,
            description: Optional[str] = None,
            ingress: Optional[str] = None,
            labels: Optional[Mapping[str, str]] = None,
            launch_stage: Optional[str] = None,
            location: Optional[str] = None,
            name: Optional[str] = None,
            project: Optional[str] = None,
            template: Optional[ServiceTemplateArgs] = None,
            traffics: Optional[Sequence[ServiceTrafficArgs]] = None)
@overload
def Service(resource_name: str,
            args: ServiceArgs,
            opts: Optional[ResourceOptions] = None)

func NewService(ctx *Context, name string, args ServiceArgs, opts ...ResourceOption) (*Service, error)

public Service(string name, ServiceArgs args, CustomResourceOptions? opts = null)

public Service(String name, ServiceArgs args)
public Service(String name, ServiceArgs args, CustomResourceOptions options)

type: gcp:cloudrunv2:Service
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ServiceArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ServiceArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ServiceArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ServiceArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ServiceArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Service Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Service resource accepts the following input properties:

Template ServiceTemplate

The template used to create revisions for this Service. Structure is documented below.

Annotations Dictionary<string, string>

Unstructured key value map that may be set by external tools to store and arbitrary metadata. They are not queryable and should be preserved when modifying objects. Cloud Run API v2 does not support annotations with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system annotations in v1 now have a corresponding field in v2 RevisionTemplate. This field follows Kubernetes annotations' namespacing, limits, and rules.

(Optional) Unstructured key value map that may be set by external tools to store and arbitrary metadata. They are not queryable and should be preserved when modifying objects. Cloud Run API v2 does not support annotations with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected in new resources. All system annotations in v1 now have a corresponding field in v2 Service. This field follows Kubernetes annotations' namespacing, limits, and rules.

BinaryAuthorization ServiceBinaryAuthorization

Settings for the Binary Authorization feature. Structure is documented below.

Client string

Arbitrary identifier for the API client.

ClientVersion string

Arbitrary version identifier for the API client.

CustomAudiences List<string>

One or more custom audiences that you want this service to support. Specify each custom audience as the full URL in a string. The custom audiences are encoded in the token and used to authenticate requests. For more information, see https://cloud.google.com/run/docs/configuring/custom-audiences.

Description string

User-provided description of the Service. This field currently has a 512-character limit.

Ingress string

Provides the ingress settings for this Service. On output, returns the currently observed ingress settings, or INGRESS_TRAFFIC_UNSPECIFIED if no revision is active. Possible values are: INGRESS_TRAFFIC_ALL, INGRESS_TRAFFIC_INTERNAL_ONLY, INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER.

Labels Dictionary<string, string>

Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment, state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or https://cloud.google.com/run/docs/configuring/labels. Cloud Run API v2 does not support labels with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system labels in v1 now have a corresponding field in v2 RevisionTemplate.

(Optional) Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment, state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or https://cloud.google.com/run/docs/configuring/labels. Cloud Run API v2 does not support labels with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system labels in v1 now have a corresponding field in v2 Service.

LaunchStage string

The launch stage as defined by Google Cloud Platform Launch Stages. Cloud Run supports ALPHA, BETA, and GA. If no value is specified, GA is assumed. Set the launch stage to a preview stage on input to allow use of preview features in that stage. On read (or output), describes whether the resource uses preview features. For example, if ALPHA is provided as input, but only BETA and GA-level features are used, this field will be BETA on output. Possible values are: UNIMPLEMENTED, PRELAUNCH, EARLY_ACCESS, ALPHA, BETA, GA, DEPRECATED.

Location string

The location of the cloud run service

Name string

Name of the Service.

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

Traffics List<ServiceTraffic>

Specifies how to distribute traffic over a collection of Revisions belonging to the Service. If traffic is empty or not provided, defaults to 100% traffic to the latest Ready Revision. Structure is documented below.

Template ServiceTemplateArgs

The template used to create revisions for this Service. Structure is documented below.

Annotations map[string]string

BinaryAuthorization ServiceBinaryAuthorizationArgs

Settings for the Binary Authorization feature. Structure is documented below.

Client string

Arbitrary identifier for the API client.

ClientVersion string

Arbitrary version identifier for the API client.

CustomAudiences []string

Description string

User-provided description of the Service. This field currently has a 512-character limit.

Ingress string

Labels map[string]string

LaunchStage string

Location string

The location of the cloud run service

Name string

Name of the Service.

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

Traffics []ServiceTrafficArgs

template ServiceTemplate

The template used to create revisions for this Service. Structure is documented below.

annotations Map<String,String>

binaryAuthorization ServiceBinaryAuthorization

Settings for the Binary Authorization feature. Structure is documented below.

client String

Arbitrary identifier for the API client.

clientVersion String

Arbitrary version identifier for the API client.

customAudiences List<String>

description String

User-provided description of the Service. This field currently has a 512-character limit.

ingress String

labels Map<String,String>

launchStage String

location String

The location of the cloud run service

name String

Name of the Service.

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

traffics List<ServiceTraffic>

template ServiceTemplate

The template used to create revisions for this Service. Structure is documented below.

annotations {[key: string]: string}

binaryAuthorization ServiceBinaryAuthorization

Settings for the Binary Authorization feature. Structure is documented below.

client string

Arbitrary identifier for the API client.

clientVersion string

Arbitrary version identifier for the API client.

customAudiences string[]

description string

User-provided description of the Service. This field currently has a 512-character limit.

ingress string

labels {[key: string]: string}

launchStage string

location string

The location of the cloud run service

name string

Name of the Service.

project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

traffics ServiceTraffic[]

template ServiceTemplateArgs

The template used to create revisions for this Service. Structure is documented below.

annotations Mapping[str, str]

binary_authorization ServiceBinaryAuthorizationArgs

Settings for the Binary Authorization feature. Structure is documented below.

client str

Arbitrary identifier for the API client.

client_version str

Arbitrary version identifier for the API client.

custom_audiences Sequence[str]

description str

User-provided description of the Service. This field currently has a 512-character limit.

ingress str

labels Mapping[str, str]

launch_stage str

location str

The location of the cloud run service

name str

Name of the Service.

project str

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

traffics Sequence[ServiceTrafficArgs]

template Property Map

The template used to create revisions for this Service. Structure is documented below.

annotations Map<String>

binaryAuthorization Property Map

Settings for the Binary Authorization feature. Structure is documented below.

client String

Arbitrary identifier for the API client.

clientVersion String

Arbitrary version identifier for the API client.

customAudiences List<String>

description String

User-provided description of the Service. This field currently has a 512-character limit.

ingress String

labels Map<String>

launchStage String

location String

The location of the cloud run service

name String

Name of the Service.

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

traffics List<Property Map>

Outputs

All input properties are implicitly available as output properties. Additionally, the Service resource produces the following output properties:

Conditions List<ServiceCondition>: The Conditions of all other associated sub-resources. They contain additional diagnostics information in case the Service does not reach its Serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
CreateTime string: The creation time.
Creator string: Email address of the authenticated creator.
DeleteTime string: The deletion time.
Etag string: A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.
ExpireTime string: For a deleted resource, the time after which it will be permamently deleted.
Generation string: A number that monotonically increases every time the user modifies the desired state. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
Id string: The provider-assigned unique ID for this managed resource.
LastModifier string: Email address of the last authenticated modifier.
LatestCreatedRevision string: Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.
LatestReadyRevision string: Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.
ObservedGeneration string: The generation of this Service currently serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
Reconciling bool: Returns true if the Service is currently being acted upon by the system to bring it into the desired state. When a new Service is created, or an existing one is updated, Cloud Run will asynchronously perform all necessary steps to bring the Service to the desired serving state. This process is called reconciliation. While reconciliation is in process, observedGeneration, latest_ready_revison, trafficStatuses, and uri will have transient values that might mismatch the intended state: Once reconciliation is over (and this field is false), there are two possible outcomes: reconciliation succeeded and the serving state matches the Service, or there was an error, and reconciliation failed. This state can be found in terminalCondition.state. If reconciliation succeeded, the following fields will match: traffic and trafficStatuses, observedGeneration and generation, latestReadyRevision and latestCreatedRevision. If reconciliation failed, trafficStatuses, observedGeneration, and latestReadyRevision will have the state of the last serving revision, or empty for newly created Services. Additional information on the failure can be found in terminalCondition and conditions.
TerminalConditions List<ServiceTerminalCondition>: The Condition of this Service, containing its readiness status, and detailed error information in case it did not reach a serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
TrafficStatuses List<ServiceTrafficStatus>: Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
Uid string: Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.
UpdateTime string: The last-modified time.
Uri string: (Output) Displays the target URI.

Conditions []ServiceCondition: The Conditions of all other associated sub-resources. They contain additional diagnostics information in case the Service does not reach its Serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
CreateTime string: The creation time.
Creator string: Email address of the authenticated creator.
DeleteTime string: The deletion time.
Etag string: A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.
ExpireTime string: For a deleted resource, the time after which it will be permamently deleted.
Generation string: A number that monotonically increases every time the user modifies the desired state. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
Id string: The provider-assigned unique ID for this managed resource.
LastModifier string: Email address of the last authenticated modifier.
LatestCreatedRevision string: Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.
LatestReadyRevision string: Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.
ObservedGeneration string: The generation of this Service currently serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
Reconciling bool: Returns true if the Service is currently being acted upon by the system to bring it into the desired state. When a new Service is created, or an existing one is updated, Cloud Run will asynchronously perform all necessary steps to bring the Service to the desired serving state. This process is called reconciliation. While reconciliation is in process, observedGeneration, latest_ready_revison, trafficStatuses, and uri will have transient values that might mismatch the intended state: Once reconciliation is over (and this field is false), there are two possible outcomes: reconciliation succeeded and the serving state matches the Service, or there was an error, and reconciliation failed. This state can be found in terminalCondition.state. If reconciliation succeeded, the following fields will match: traffic and trafficStatuses, observedGeneration and generation, latestReadyRevision and latestCreatedRevision. If reconciliation failed, trafficStatuses, observedGeneration, and latestReadyRevision will have the state of the last serving revision, or empty for newly created Services. Additional information on the failure can be found in terminalCondition and conditions.
TerminalConditions []ServiceTerminalCondition: The Condition of this Service, containing its readiness status, and detailed error information in case it did not reach a serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
TrafficStatuses []ServiceTrafficStatus: Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
Uid string: Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.
UpdateTime string: The last-modified time.
Uri string: (Output) Displays the target URI.

conditions List<ServiceCondition>: The Conditions of all other associated sub-resources. They contain additional diagnostics information in case the Service does not reach its Serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
createTime String: The creation time.
creator String: Email address of the authenticated creator.
deleteTime String: The deletion time.
etag String: A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.
expireTime String: For a deleted resource, the time after which it will be permamently deleted.
generation String: A number that monotonically increases every time the user modifies the desired state. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
id String: The provider-assigned unique ID for this managed resource.
lastModifier String: Email address of the last authenticated modifier.
latestCreatedRevision String: Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.
latestReadyRevision String: Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.
observedGeneration String: The generation of this Service currently serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
reconciling Boolean: Returns true if the Service is currently being acted upon by the system to bring it into the desired state. When a new Service is created, or an existing one is updated, Cloud Run will asynchronously perform all necessary steps to bring the Service to the desired serving state. This process is called reconciliation. While reconciliation is in process, observedGeneration, latest_ready_revison, trafficStatuses, and uri will have transient values that might mismatch the intended state: Once reconciliation is over (and this field is false), there are two possible outcomes: reconciliation succeeded and the serving state matches the Service, or there was an error, and reconciliation failed. This state can be found in terminalCondition.state. If reconciliation succeeded, the following fields will match: traffic and trafficStatuses, observedGeneration and generation, latestReadyRevision and latestCreatedRevision. If reconciliation failed, trafficStatuses, observedGeneration, and latestReadyRevision will have the state of the last serving revision, or empty for newly created Services. Additional information on the failure can be found in terminalCondition and conditions.
terminalConditions List<ServiceTerminalCondition>: The Condition of this Service, containing its readiness status, and detailed error information in case it did not reach a serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
trafficStatuses List<ServiceTrafficStatus>: Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
uid String: Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.
updateTime String: The last-modified time.
uri String: (Output) Displays the target URI.

conditions ServiceCondition[]: The Conditions of all other associated sub-resources. They contain additional diagnostics information in case the Service does not reach its Serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
createTime string: The creation time.
creator string: Email address of the authenticated creator.
deleteTime string: The deletion time.
etag string: A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.
expireTime string: For a deleted resource, the time after which it will be permamently deleted.
generation string: A number that monotonically increases every time the user modifies the desired state. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
id string: The provider-assigned unique ID for this managed resource.
lastModifier string: Email address of the last authenticated modifier.
latestCreatedRevision string: Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.
latestReadyRevision string: Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.
observedGeneration string: The generation of this Service currently serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
reconciling boolean: Returns true if the Service is currently being acted upon by the system to bring it into the desired state. When a new Service is created, or an existing one is updated, Cloud Run will asynchronously perform all necessary steps to bring the Service to the desired serving state. This process is called reconciliation. While reconciliation is in process, observedGeneration, latest_ready_revison, trafficStatuses, and uri will have transient values that might mismatch the intended state: Once reconciliation is over (and this field is false), there are two possible outcomes: reconciliation succeeded and the serving state matches the Service, or there was an error, and reconciliation failed. This state can be found in terminalCondition.state. If reconciliation succeeded, the following fields will match: traffic and trafficStatuses, observedGeneration and generation, latestReadyRevision and latestCreatedRevision. If reconciliation failed, trafficStatuses, observedGeneration, and latestReadyRevision will have the state of the last serving revision, or empty for newly created Services. Additional information on the failure can be found in terminalCondition and conditions.
terminalConditions ServiceTerminalCondition[]: The Condition of this Service, containing its readiness status, and detailed error information in case it did not reach a serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
trafficStatuses ServiceTrafficStatus[]: Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
uid string: Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.
updateTime string: The last-modified time.
uri string: (Output) Displays the target URI.

conditions Sequence[ServiceCondition]: The Conditions of all other associated sub-resources. They contain additional diagnostics information in case the Service does not reach its Serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
create_time str: The creation time.
creator str: Email address of the authenticated creator.
delete_time str: The deletion time.
etag str: A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.
expire_time str: For a deleted resource, the time after which it will be permamently deleted.
generation str: A number that monotonically increases every time the user modifies the desired state. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
id str: The provider-assigned unique ID for this managed resource.
last_modifier str: Email address of the last authenticated modifier.
latest_created_revision str: Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.
latest_ready_revision str: Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.
observed_generation str: The generation of this Service currently serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
reconciling bool: Returns true if the Service is currently being acted upon by the system to bring it into the desired state. When a new Service is created, or an existing one is updated, Cloud Run will asynchronously perform all necessary steps to bring the Service to the desired serving state. This process is called reconciliation. While reconciliation is in process, observedGeneration, latest_ready_revison, trafficStatuses, and uri will have transient values that might mismatch the intended state: Once reconciliation is over (and this field is false), there are two possible outcomes: reconciliation succeeded and the serving state matches the Service, or there was an error, and reconciliation failed. This state can be found in terminalCondition.state. If reconciliation succeeded, the following fields will match: traffic and trafficStatuses, observedGeneration and generation, latestReadyRevision and latestCreatedRevision. If reconciliation failed, trafficStatuses, observedGeneration, and latestReadyRevision will have the state of the last serving revision, or empty for newly created Services. Additional information on the failure can be found in terminalCondition and conditions.
terminal_conditions Sequence[ServiceTerminalCondition]: The Condition of this Service, containing its readiness status, and detailed error information in case it did not reach a serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
traffic_statuses Sequence[ServiceTrafficStatus]: Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
uid str: Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.
update_time str: The last-modified time.
uri str: (Output) Displays the target URI.

conditions List<Property Map>: The Conditions of all other associated sub-resources. They contain additional diagnostics information in case the Service does not reach its Serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
createTime String: The creation time.
creator String: Email address of the authenticated creator.
deleteTime String: The deletion time.
etag String: A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.
expireTime String: For a deleted resource, the time after which it will be permamently deleted.
generation String: A number that monotonically increases every time the user modifies the desired state. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
id String: The provider-assigned unique ID for this managed resource.
lastModifier String: Email address of the last authenticated modifier.
latestCreatedRevision String: Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.
latestReadyRevision String: Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.
observedGeneration String: The generation of this Service currently serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.
reconciling Boolean: Returns true if the Service is currently being acted upon by the system to bring it into the desired state. When a new Service is created, or an existing one is updated, Cloud Run will asynchronously perform all necessary steps to bring the Service to the desired serving state. This process is called reconciliation. While reconciliation is in process, observedGeneration, latest_ready_revison, trafficStatuses, and uri will have transient values that might mismatch the intended state: Once reconciliation is over (and this field is false), there are two possible outcomes: reconciliation succeeded and the serving state matches the Service, or there was an error, and reconciliation failed. This state can be found in terminalCondition.state. If reconciliation succeeded, the following fields will match: traffic and trafficStatuses, observedGeneration and generation, latestReadyRevision and latestCreatedRevision. If reconciliation failed, trafficStatuses, observedGeneration, and latestReadyRevision will have the state of the last serving revision, or empty for newly created Services. Additional information on the failure can be found in terminalCondition and conditions.
terminalConditions List<Property Map>: The Condition of this Service, containing its readiness status, and detailed error information in case it did not reach a serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
trafficStatuses List<Property Map>: Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.
uid String: Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.
updateTime String: The last-modified time.
uri String: (Output) Displays the target URI.

Look up Existing Service Resource

Get an existing Service resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ServiceState, opts?: CustomResourceOptions): Service

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        annotations: Optional[Mapping[str, str]] = None,
        binary_authorization: Optional[ServiceBinaryAuthorizationArgs] = None,
        client: Optional[str] = None,
        client_version: Optional[str] = None,
        conditions: Optional[Sequence[ServiceConditionArgs]] = None,
        create_time: Optional[str] = None,
        creator: Optional[str] = None,
        custom_audiences: Optional[Sequence[str]] = None,
        delete_time: Optional[str] = None,
        description: Optional[str] = None,
        etag: Optional[str] = None,
        expire_time: Optional[str] = None,
        generation: Optional[str] = None,
        ingress: Optional[str] = None,
        labels: Optional[Mapping[str, str]] = None,
        last_modifier: Optional[str] = None,
        latest_created_revision: Optional[str] = None,
        latest_ready_revision: Optional[str] = None,
        launch_stage: Optional[str] = None,
        location: Optional[str] = None,
        name: Optional[str] = None,
        observed_generation: Optional[str] = None,
        project: Optional[str] = None,
        reconciling: Optional[bool] = None,
        template: Optional[ServiceTemplateArgs] = None,
        terminal_conditions: Optional[Sequence[ServiceTerminalConditionArgs]] = None,
        traffic_statuses: Optional[Sequence[ServiceTrafficStatusArgs]] = None,
        traffics: Optional[Sequence[ServiceTrafficArgs]] = None,
        uid: Optional[str] = None,
        update_time: Optional[str] = None,
        uri: Optional[str] = None) -> Service

func GetService(ctx *Context, name string, id IDInput, state *ServiceState, opts ...ResourceOption) (*Service, error)

public static Service Get(string name, Input<string> id, ServiceState? state, CustomResourceOptions? opts = null)

public static Service get(String name, Output<String> id, ServiceState state, CustomResourceOptions options)

Resource lookup is not supported in YAML

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Annotations Dictionary<string, string>

BinaryAuthorization ServiceBinaryAuthorization

Settings for the Binary Authorization feature. Structure is documented below.

Client string

Arbitrary identifier for the API client.

ClientVersion string

Arbitrary version identifier for the API client.

Conditions List<ServiceCondition>

The Conditions of all other associated sub-resources. They contain additional diagnostics information in case the Service does not reach its Serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.

CreateTime string

The creation time.

Creator string

Email address of the authenticated creator.

CustomAudiences List<string>

DeleteTime string

The deletion time.

Description string

User-provided description of the Service. This field currently has a 512-character limit.

Etag string

A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.

ExpireTime string

For a deleted resource, the time after which it will be permamently deleted.

Generation string

A number that monotonically increases every time the user modifies the desired state. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.

Ingress string

Labels Dictionary<string, string>

LastModifier string

Email address of the last authenticated modifier.

LatestCreatedRevision string

Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.

LatestReadyRevision string

Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.

LaunchStage string

Location string

The location of the cloud run service

Name string

Name of the Service.

ObservedGeneration string

The generation of this Service currently serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run. Please note that unlike v1, this is an int64 value. As with most Google APIs, its JSON representation will be a string instead of an integer.

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

Reconciling bool

Returns true if the Service is currently being acted upon by the system to bring it into the desired state. When a new Service is created, or an existing one is updated, Cloud Run will asynchronously perform all necessary steps to bring the Service to the desired serving state. This process is called reconciliation. While reconciliation is in process, observedGeneration, latest_ready_revison, trafficStatuses, and uri will have transient values that might mismatch the intended state: Once reconciliation is over (and this field is false), there are two possible outcomes: reconciliation succeeded and the serving state matches the Service, or there was an error, and reconciliation failed. This state can be found in terminalCondition.state. If reconciliation succeeded, the following fields will match: traffic and trafficStatuses, observedGeneration and generation, latestReadyRevision and latestCreatedRevision. If reconciliation failed, trafficStatuses, observedGeneration, and latestReadyRevision will have the state of the last serving revision, or empty for newly created Services. Additional information on the failure can be found in terminalCondition and conditions.

Template ServiceTemplate

The template used to create revisions for this Service. Structure is documented below.

TerminalConditions List<ServiceTerminalCondition>

The Condition of this Service, containing its readiness status, and detailed error information in case it did not reach a serving state. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.

TrafficStatuses List<ServiceTrafficStatus>

Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.

Traffics List<ServiceTraffic>

Uid string

Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.

UpdateTime string

The last-modified time.

Uri string

(Output) Displays the target URI.

Annotations map[string]string

BinaryAuthorization ServiceBinaryAuthorizationArgs

Settings for the Binary Authorization feature. Structure is documented below.

Client string

Arbitrary identifier for the API client.

ClientVersion string

Arbitrary version identifier for the API client.

Conditions []ServiceConditionArgs

CreateTime string

The creation time.

Creator string

Email address of the authenticated creator.

CustomAudiences []string

DeleteTime string

The deletion time.

Description string

User-provided description of the Service. This field currently has a 512-character limit.

Etag string

A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.

ExpireTime string

For a deleted resource, the time after which it will be permamently deleted.

Generation string

Ingress string

Labels map[string]string

LastModifier string

Email address of the last authenticated modifier.

LatestCreatedRevision string

Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.

LatestReadyRevision string

Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.

LaunchStage string

Location string

The location of the cloud run service

Name string

Name of the Service.

ObservedGeneration string

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

Reconciling bool

Template ServiceTemplateArgs

The template used to create revisions for this Service. Structure is documented below.

TerminalConditions []ServiceTerminalConditionArgs

TrafficStatuses []ServiceTrafficStatusArgs

Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.

Traffics []ServiceTrafficArgs

Uid string

Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.

UpdateTime string

The last-modified time.

Uri string

(Output) Displays the target URI.

annotations Map<String,String>

binaryAuthorization ServiceBinaryAuthorization

Settings for the Binary Authorization feature. Structure is documented below.

client String

Arbitrary identifier for the API client.

clientVersion String

Arbitrary version identifier for the API client.

conditions List<ServiceCondition>

createTime String

The creation time.

creator String

Email address of the authenticated creator.

customAudiences List<String>

deleteTime String

The deletion time.

description String

User-provided description of the Service. This field currently has a 512-character limit.

etag String

A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.

expireTime String

For a deleted resource, the time after which it will be permamently deleted.

generation String

ingress String

labels Map<String,String>

lastModifier String

Email address of the last authenticated modifier.

latestCreatedRevision String

Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.

latestReadyRevision String

Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.

launchStage String

location String

The location of the cloud run service

name String

Name of the Service.

observedGeneration String

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

reconciling Boolean

template ServiceTemplate

The template used to create revisions for this Service. Structure is documented below.

terminalConditions List<ServiceTerminalCondition>

trafficStatuses List<ServiceTrafficStatus>

Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.

traffics List<ServiceTraffic>

uid String

Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.

updateTime String

The last-modified time.

uri String

(Output) Displays the target URI.

annotations {[key: string]: string}

binaryAuthorization ServiceBinaryAuthorization

Settings for the Binary Authorization feature. Structure is documented below.

client string

Arbitrary identifier for the API client.

clientVersion string

Arbitrary version identifier for the API client.

conditions ServiceCondition[]

createTime string

The creation time.

creator string

Email address of the authenticated creator.

customAudiences string[]

deleteTime string

The deletion time.

description string

User-provided description of the Service. This field currently has a 512-character limit.

etag string

A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.

expireTime string

For a deleted resource, the time after which it will be permamently deleted.

generation string

ingress string

labels {[key: string]: string}

lastModifier string

Email address of the last authenticated modifier.

latestCreatedRevision string

Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.

latestReadyRevision string

Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.

launchStage string

location string

The location of the cloud run service

name string

Name of the Service.

observedGeneration string

project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

reconciling boolean

template ServiceTemplate

The template used to create revisions for this Service. Structure is documented below.

terminalConditions ServiceTerminalCondition[]

trafficStatuses ServiceTrafficStatus[]

Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.

traffics ServiceTraffic[]

uid string

Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.

updateTime string

The last-modified time.

uri string

(Output) Displays the target URI.

annotations Mapping[str, str]

binary_authorization ServiceBinaryAuthorizationArgs

Settings for the Binary Authorization feature. Structure is documented below.

client str

Arbitrary identifier for the API client.

client_version str

Arbitrary version identifier for the API client.

conditions Sequence[ServiceConditionArgs]

create_time str

The creation time.

creator str

Email address of the authenticated creator.

custom_audiences Sequence[str]

delete_time str

The deletion time.

description str

User-provided description of the Service. This field currently has a 512-character limit.

etag str

A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.

expire_time str

For a deleted resource, the time after which it will be permamently deleted.

generation str

ingress str

labels Mapping[str, str]

last_modifier str

Email address of the last authenticated modifier.

latest_created_revision str

Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.

latest_ready_revision str

Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.

launch_stage str

location str

The location of the cloud run service

name str

Name of the Service.

observed_generation str

project str

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

reconciling bool

template ServiceTemplateArgs

The template used to create revisions for this Service. Structure is documented below.

terminal_conditions Sequence[ServiceTerminalConditionArgs]

traffic_statuses Sequence[ServiceTrafficStatusArgs]

Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.

traffics Sequence[ServiceTrafficArgs]

uid str

Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.

update_time str

The last-modified time.

uri str

(Output) Displays the target URI.

annotations Map<String>

binaryAuthorization Property Map

Settings for the Binary Authorization feature. Structure is documented below.

client String

Arbitrary identifier for the API client.

clientVersion String

Arbitrary version identifier for the API client.

conditions List<Property Map>

createTime String

The creation time.

creator String

Email address of the authenticated creator.

customAudiences List<String>

deleteTime String

The deletion time.

description String

User-provided description of the Service. This field currently has a 512-character limit.

etag String

A system-generated fingerprint for this version of the resource. May be used to detect modification conflict during updates.

expireTime String

For a deleted resource, the time after which it will be permamently deleted.

generation String

ingress String

labels Map<String>

lastModifier String

Email address of the last authenticated modifier.

latestCreatedRevision String

Name of the last created revision. See comments in reconciling for additional information on reconciliation process in Cloud Run.

latestReadyRevision String

Name of the latest revision that is serving traffic. See comments in reconciling for additional information on reconciliation process in Cloud Run.

launchStage String

location String

The location of the cloud run service

name String

Name of the Service.

observedGeneration String

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

reconciling Boolean

template Property Map

The template used to create revisions for this Service. Structure is documented below.

terminalConditions List<Property Map>

trafficStatuses List<Property Map>

Detailed status information for corresponding traffic targets. See comments in reconciling for additional information on reconciliation process in Cloud Run. Structure is documented below.

traffics List<Property Map>

uid String

Server assigned unique identifier for the trigger. The value is a UUID4 string and guaranteed to remain unchanged until the resource is deleted.

updateTime String

The last-modified time.

uri String

(Output) Displays the target URI.

Supporting Types

ServiceBinaryAuthorization, ServiceBinaryAuthorizationArgs

BreakglassJustification string: If present, indicates to use Breakglass using this justification. If useDefault is False, then it must be empty. For more information on breakglass, see https://cloud.google.com/binary-authorization/docs/using-breakglass
UseDefault bool: If True, indicates to use the default project's binary authorization policy. If False, binary authorization will be disabled.

BreakglassJustification string: If present, indicates to use Breakglass using this justification. If useDefault is False, then it must be empty. For more information on breakglass, see https://cloud.google.com/binary-authorization/docs/using-breakglass
UseDefault bool: If True, indicates to use the default project's binary authorization policy. If False, binary authorization will be disabled.

breakglassJustification String: If present, indicates to use Breakglass using this justification. If useDefault is False, then it must be empty. For more information on breakglass, see https://cloud.google.com/binary-authorization/docs/using-breakglass
useDefault Boolean: If True, indicates to use the default project's binary authorization policy. If False, binary authorization will be disabled.

breakglassJustification string: If present, indicates to use Breakglass using this justification. If useDefault is False, then it must be empty. For more information on breakglass, see https://cloud.google.com/binary-authorization/docs/using-breakglass
useDefault boolean: If True, indicates to use the default project's binary authorization policy. If False, binary authorization will be disabled.

breakglass_justification str: If present, indicates to use Breakglass using this justification. If useDefault is False, then it must be empty. For more information on breakglass, see https://cloud.google.com/binary-authorization/docs/using-breakglass
use_default bool: If True, indicates to use the default project's binary authorization policy. If False, binary authorization will be disabled.

breakglassJustification String: If present, indicates to use Breakglass using this justification. If useDefault is False, then it must be empty. For more information on breakglass, see https://cloud.google.com/binary-authorization/docs/using-breakglass
useDefault Boolean: If True, indicates to use the default project's binary authorization policy. If False, binary authorization will be disabled.

ServiceCondition, ServiceConditionArgs

ExecutionReason string: (Output) A reason for the execution condition.
LastTransitionTime string: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Message string: (Output) Human readable message indicating details about the current status.
Reason string: (Output) A common (service-level) reason for this condition.
RevisionReason string: (Output) A reason for the revision condition.
Severity string: (Output) How to interpret failures of this condition, one of Error, Warning, Info
State string: (Output) State of the condition.
Type string: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

ExecutionReason string: (Output) A reason for the execution condition.
LastTransitionTime string: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Message string: (Output) Human readable message indicating details about the current status.
Reason string: (Output) A common (service-level) reason for this condition.
RevisionReason string: (Output) A reason for the revision condition.
Severity string: (Output) How to interpret failures of this condition, one of Error, Warning, Info
State string: (Output) State of the condition.
Type string: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

executionReason String: (Output) A reason for the execution condition.
lastTransitionTime String: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
message String: (Output) Human readable message indicating details about the current status.
reason String: (Output) A common (service-level) reason for this condition.
revisionReason String: (Output) A reason for the revision condition.
severity String: (Output) How to interpret failures of this condition, one of Error, Warning, Info
state String: (Output) State of the condition.
type String: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

executionReason string: (Output) A reason for the execution condition.
lastTransitionTime string: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
message string: (Output) Human readable message indicating details about the current status.
reason string: (Output) A common (service-level) reason for this condition.
revisionReason string: (Output) A reason for the revision condition.
severity string: (Output) How to interpret failures of this condition, one of Error, Warning, Info
state string: (Output) State of the condition.
type string: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

execution_reason str: (Output) A reason for the execution condition.
last_transition_time str: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
message str: (Output) Human readable message indicating details about the current status.
reason str: (Output) A common (service-level) reason for this condition.
revision_reason str: (Output) A reason for the revision condition.
severity str: (Output) How to interpret failures of this condition, one of Error, Warning, Info
state str: (Output) State of the condition.
type str: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

executionReason String: (Output) A reason for the execution condition.
lastTransitionTime String: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
message String: (Output) Human readable message indicating details about the current status.
reason String: (Output) A common (service-level) reason for this condition.
revisionReason String: (Output) A reason for the revision condition.
severity String: (Output) How to interpret failures of this condition, one of Error, Warning, Info
state String: (Output) State of the condition.
type String: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

ServiceTemplate, ServiceTemplateArgs

Annotations Dictionary<string, string>: Unstructured key value map that may be set by external tools to store and arbitrary metadata. They are not queryable and should be preserved when modifying objects. Cloud Run API v2 does not support annotations with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system annotations in v1 now have a corresponding field in v2 RevisionTemplate. This field follows Kubernetes annotations' namespacing, limits, and rules.
Containers List<ServiceTemplateContainer>: Holds the containers that define the unit of execution for this Service. Structure is documented below.
EncryptionKey string: A reference to a customer managed encryption key (CMEK) to use to encrypt this container image. For more information, go to https://cloud.google.com/run/docs/securing/using-cmek
ExecutionEnvironment string: The sandbox environment to host this Revision. Possible values are: EXECUTION_ENVIRONMENT_GEN1, EXECUTION_ENVIRONMENT_GEN2.
Labels Dictionary<string, string>: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment, state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or https://cloud.google.com/run/docs/configuring/labels. Cloud Run API v2 does not support labels with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system labels in v1 now have a corresponding field in v2 RevisionTemplate.
MaxInstanceRequestConcurrency int: Sets the maximum number of requests that each serving instance can receive.
Revision string: The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.
Scaling ServiceTemplateScaling: Scaling settings for this Revision. Structure is documented below.
ServiceAccount string: Email address of the IAM service account associated with the revision of the service. The service account represents the identity of the running revision, and determines what permissions the revision has. If not provided, the revision will use the project's default service account.
SessionAffinity bool: Enables session affinity. For more information, go to https://cloud.google.com/run/docs/configuring/session-affinity
Timeout string: Max allowed time for an instance to respond to a request. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
Volumes List<ServiceTemplateVolume>: A list of Volumes to make available to containers. Structure is documented below.
VpcAccess ServiceTemplateVpcAccess: VPC Access configuration to use for this Task. For more information, visit https://cloud.google.com/run/docs/configuring/connecting-vpc. Structure is documented below.

Annotations map[string]string: Unstructured key value map that may be set by external tools to store and arbitrary metadata. They are not queryable and should be preserved when modifying objects. Cloud Run API v2 does not support annotations with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system annotations in v1 now have a corresponding field in v2 RevisionTemplate. This field follows Kubernetes annotations' namespacing, limits, and rules.
Containers []ServiceTemplateContainer: Holds the containers that define the unit of execution for this Service. Structure is documented below.
EncryptionKey string: A reference to a customer managed encryption key (CMEK) to use to encrypt this container image. For more information, go to https://cloud.google.com/run/docs/securing/using-cmek
ExecutionEnvironment string: The sandbox environment to host this Revision. Possible values are: EXECUTION_ENVIRONMENT_GEN1, EXECUTION_ENVIRONMENT_GEN2.
Labels map[string]string: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment, state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or https://cloud.google.com/run/docs/configuring/labels. Cloud Run API v2 does not support labels with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system labels in v1 now have a corresponding field in v2 RevisionTemplate.
MaxInstanceRequestConcurrency int: Sets the maximum number of requests that each serving instance can receive.
Revision string: The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.
Scaling ServiceTemplateScaling: Scaling settings for this Revision. Structure is documented below.
ServiceAccount string: Email address of the IAM service account associated with the revision of the service. The service account represents the identity of the running revision, and determines what permissions the revision has. If not provided, the revision will use the project's default service account.
SessionAffinity bool: Enables session affinity. For more information, go to https://cloud.google.com/run/docs/configuring/session-affinity
Timeout string: Max allowed time for an instance to respond to a request. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
Volumes []ServiceTemplateVolume: A list of Volumes to make available to containers. Structure is documented below.
VpcAccess ServiceTemplateVpcAccess: VPC Access configuration to use for this Task. For more information, visit https://cloud.google.com/run/docs/configuring/connecting-vpc. Structure is documented below.

annotations Map<String,String>: Unstructured key value map that may be set by external tools to store and arbitrary metadata. They are not queryable and should be preserved when modifying objects. Cloud Run API v2 does not support annotations with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system annotations in v1 now have a corresponding field in v2 RevisionTemplate. This field follows Kubernetes annotations' namespacing, limits, and rules.
containers List<ServiceTemplateContainer>: Holds the containers that define the unit of execution for this Service. Structure is documented below.
encryptionKey String: A reference to a customer managed encryption key (CMEK) to use to encrypt this container image. For more information, go to https://cloud.google.com/run/docs/securing/using-cmek
executionEnvironment String: The sandbox environment to host this Revision. Possible values are: EXECUTION_ENVIRONMENT_GEN1, EXECUTION_ENVIRONMENT_GEN2.
labels Map<String,String>: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment, state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or https://cloud.google.com/run/docs/configuring/labels. Cloud Run API v2 does not support labels with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system labels in v1 now have a corresponding field in v2 RevisionTemplate.
maxInstanceRequestConcurrency Integer: Sets the maximum number of requests that each serving instance can receive.
revision String: The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.
scaling ServiceTemplateScaling: Scaling settings for this Revision. Structure is documented below.
serviceAccount String: Email address of the IAM service account associated with the revision of the service. The service account represents the identity of the running revision, and determines what permissions the revision has. If not provided, the revision will use the project's default service account.
sessionAffinity Boolean: Enables session affinity. For more information, go to https://cloud.google.com/run/docs/configuring/session-affinity
timeout String: Max allowed time for an instance to respond to a request. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
volumes List<ServiceTemplateVolume>: A list of Volumes to make available to containers. Structure is documented below.
vpcAccess ServiceTemplateVpcAccess: VPC Access configuration to use for this Task. For more information, visit https://cloud.google.com/run/docs/configuring/connecting-vpc. Structure is documented below.

annotations {[key: string]: string}: Unstructured key value map that may be set by external tools to store and arbitrary metadata. They are not queryable and should be preserved when modifying objects. Cloud Run API v2 does not support annotations with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system annotations in v1 now have a corresponding field in v2 RevisionTemplate. This field follows Kubernetes annotations' namespacing, limits, and rules.
containers ServiceTemplateContainer[]: Holds the containers that define the unit of execution for this Service. Structure is documented below.
encryptionKey string: A reference to a customer managed encryption key (CMEK) to use to encrypt this container image. For more information, go to https://cloud.google.com/run/docs/securing/using-cmek
executionEnvironment string: The sandbox environment to host this Revision. Possible values are: EXECUTION_ENVIRONMENT_GEN1, EXECUTION_ENVIRONMENT_GEN2.
labels {[key: string]: string}: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment, state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or https://cloud.google.com/run/docs/configuring/labels. Cloud Run API v2 does not support labels with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system labels in v1 now have a corresponding field in v2 RevisionTemplate.
maxInstanceRequestConcurrency number: Sets the maximum number of requests that each serving instance can receive.
revision string: The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.
scaling ServiceTemplateScaling: Scaling settings for this Revision. Structure is documented below.
serviceAccount string: Email address of the IAM service account associated with the revision of the service. The service account represents the identity of the running revision, and determines what permissions the revision has. If not provided, the revision will use the project's default service account.
sessionAffinity boolean: Enables session affinity. For more information, go to https://cloud.google.com/run/docs/configuring/session-affinity
timeout string: Max allowed time for an instance to respond to a request. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
volumes ServiceTemplateVolume[]: A list of Volumes to make available to containers. Structure is documented below.
vpcAccess ServiceTemplateVpcAccess: VPC Access configuration to use for this Task. For more information, visit https://cloud.google.com/run/docs/configuring/connecting-vpc. Structure is documented below.

annotations Mapping[str, str]: Unstructured key value map that may be set by external tools to store and arbitrary metadata. They are not queryable and should be preserved when modifying objects. Cloud Run API v2 does not support annotations with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system annotations in v1 now have a corresponding field in v2 RevisionTemplate. This field follows Kubernetes annotations' namespacing, limits, and rules.
containers Sequence[ServiceTemplateContainer]: Holds the containers that define the unit of execution for this Service. Structure is documented below.
encryption_key str: A reference to a customer managed encryption key (CMEK) to use to encrypt this container image. For more information, go to https://cloud.google.com/run/docs/securing/using-cmek
execution_environment str: The sandbox environment to host this Revision. Possible values are: EXECUTION_ENVIRONMENT_GEN1, EXECUTION_ENVIRONMENT_GEN2.
labels Mapping[str, str]: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment, state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or https://cloud.google.com/run/docs/configuring/labels. Cloud Run API v2 does not support labels with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system labels in v1 now have a corresponding field in v2 RevisionTemplate.
max_instance_request_concurrency int: Sets the maximum number of requests that each serving instance can receive.
revision str: The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.
scaling ServiceTemplateScaling: Scaling settings for this Revision. Structure is documented below.
service_account str: Email address of the IAM service account associated with the revision of the service. The service account represents the identity of the running revision, and determines what permissions the revision has. If not provided, the revision will use the project's default service account.
session_affinity bool: Enables session affinity. For more information, go to https://cloud.google.com/run/docs/configuring/session-affinity
timeout str: Max allowed time for an instance to respond to a request. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
volumes Sequence[ServiceTemplateVolume]: A list of Volumes to make available to containers. Structure is documented below.
vpc_access ServiceTemplateVpcAccess: VPC Access configuration to use for this Task. For more information, visit https://cloud.google.com/run/docs/configuring/connecting-vpc. Structure is documented below.

annotations Map<String>: Unstructured key value map that may be set by external tools to store and arbitrary metadata. They are not queryable and should be preserved when modifying objects. Cloud Run API v2 does not support annotations with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system annotations in v1 now have a corresponding field in v2 RevisionTemplate. This field follows Kubernetes annotations' namespacing, limits, and rules.
containers List<Property Map>: Holds the containers that define the unit of execution for this Service. Structure is documented below.
encryptionKey String: A reference to a customer managed encryption key (CMEK) to use to encrypt this container image. For more information, go to https://cloud.google.com/run/docs/securing/using-cmek
executionEnvironment String: The sandbox environment to host this Revision. Possible values are: EXECUTION_ENVIRONMENT_GEN1, EXECUTION_ENVIRONMENT_GEN2.
labels Map<String>: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment, state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or https://cloud.google.com/run/docs/configuring/labels. Cloud Run API v2 does not support labels with run.googleapis.com, cloud.googleapis.com, serving.knative.dev, or autoscaling.knative.dev namespaces, and they will be rejected. All system labels in v1 now have a corresponding field in v2 RevisionTemplate.
maxInstanceRequestConcurrency Number: Sets the maximum number of requests that each serving instance can receive.
revision String: The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.
scaling Property Map: Scaling settings for this Revision. Structure is documented below.
serviceAccount String: Email address of the IAM service account associated with the revision of the service. The service account represents the identity of the running revision, and determines what permissions the revision has. If not provided, the revision will use the project's default service account.
sessionAffinity Boolean: Enables session affinity. For more information, go to https://cloud.google.com/run/docs/configuring/session-affinity
timeout String: Max allowed time for an instance to respond to a request. A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".
volumes List<Property Map>: A list of Volumes to make available to containers. Structure is documented below.
vpcAccess Property Map: VPC Access configuration to use for this Task. For more information, visit https://cloud.google.com/run/docs/configuring/connecting-vpc. Structure is documented below.

ServiceTemplateContainer, ServiceTemplateContainerArgs

Image string: URL of the Container image in Google Container Registry or Google Artifact Registry. More info: https://kubernetes.io/docs/concepts/containers/images
Args List<string>: Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
Commands List<string>: Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
DependsOns List<string>
Envs List<ServiceTemplateContainerEnv>: List of environment variables to set in the container. Structure is documented below.
LivenessProbe ServiceTemplateContainerLivenessProbe: Periodic probe of container liveness. Container will be restarted if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
Name string: Name of the container specified as a DNS_LABEL.
Ports List<ServiceTemplateContainerPort>: List of ports to expose from the container. Only a single port can be specified. The specified ports must be listening on all interfaces (0.0.0.0) within the container to be accessible. If omitted, a port number will be chosen and passed to the container through the PORT environment variable for the container to listen on Structure is documented below.
Resources ServiceTemplateContainerResources: Compute Resource requirements by this container. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources Structure is documented below.
StartupProbe ServiceTemplateContainerStartupProbe: Startup probe of application within the container. All other probes are disabled if a startup probe is provided, until it succeeds. Container will not be added to service endpoints if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
VolumeMounts List<ServiceTemplateContainerVolumeMount>: Volume to mount into the container's filesystem. Structure is documented below.
WorkingDir string: Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image.

Image string: URL of the Container image in Google Container Registry or Google Artifact Registry. More info: https://kubernetes.io/docs/concepts/containers/images
Args []string: Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
Commands []string: Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
DependsOns []string
Envs []ServiceTemplateContainerEnv: List of environment variables to set in the container. Structure is documented below.
LivenessProbe ServiceTemplateContainerLivenessProbe: Periodic probe of container liveness. Container will be restarted if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
Name string: Name of the container specified as a DNS_LABEL.
Ports []ServiceTemplateContainerPort: List of ports to expose from the container. Only a single port can be specified. The specified ports must be listening on all interfaces (0.0.0.0) within the container to be accessible. If omitted, a port number will be chosen and passed to the container through the PORT environment variable for the container to listen on Structure is documented below.
Resources ServiceTemplateContainerResources: Compute Resource requirements by this container. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources Structure is documented below.
StartupProbe ServiceTemplateContainerStartupProbe: Startup probe of application within the container. All other probes are disabled if a startup probe is provided, until it succeeds. Container will not be added to service endpoints if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
VolumeMounts []ServiceTemplateContainerVolumeMount: Volume to mount into the container's filesystem. Structure is documented below.
WorkingDir string: Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image.

image String: URL of the Container image in Google Container Registry or Google Artifact Registry. More info: https://kubernetes.io/docs/concepts/containers/images
args List<String>: Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
commands List<String>: Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
dependsOns List<String>
envs List<ServiceTemplateContainerEnv>: List of environment variables to set in the container. Structure is documented below.
livenessProbe ServiceTemplateContainerLivenessProbe: Periodic probe of container liveness. Container will be restarted if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
name String: Name of the container specified as a DNS_LABEL.
ports List<ServiceTemplateContainerPort>: List of ports to expose from the container. Only a single port can be specified. The specified ports must be listening on all interfaces (0.0.0.0) within the container to be accessible. If omitted, a port number will be chosen and passed to the container through the PORT environment variable for the container to listen on Structure is documented below.
resources ServiceTemplateContainerResources: Compute Resource requirements by this container. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources Structure is documented below.
startupProbe ServiceTemplateContainerStartupProbe: Startup probe of application within the container. All other probes are disabled if a startup probe is provided, until it succeeds. Container will not be added to service endpoints if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
volumeMounts List<ServiceTemplateContainerVolumeMount>: Volume to mount into the container's filesystem. Structure is documented below.
workingDir String: Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image.

image string: URL of the Container image in Google Container Registry or Google Artifact Registry. More info: https://kubernetes.io/docs/concepts/containers/images
args string[]: Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
commands string[]: Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
dependsOns string[]
envs ServiceTemplateContainerEnv[]: List of environment variables to set in the container. Structure is documented below.
livenessProbe ServiceTemplateContainerLivenessProbe: Periodic probe of container liveness. Container will be restarted if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
name string: Name of the container specified as a DNS_LABEL.
ports ServiceTemplateContainerPort[]: List of ports to expose from the container. Only a single port can be specified. The specified ports must be listening on all interfaces (0.0.0.0) within the container to be accessible. If omitted, a port number will be chosen and passed to the container through the PORT environment variable for the container to listen on Structure is documented below.
resources ServiceTemplateContainerResources: Compute Resource requirements by this container. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources Structure is documented below.
startupProbe ServiceTemplateContainerStartupProbe: Startup probe of application within the container. All other probes are disabled if a startup probe is provided, until it succeeds. Container will not be added to service endpoints if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
volumeMounts ServiceTemplateContainerVolumeMount[]: Volume to mount into the container's filesystem. Structure is documented below.
workingDir string: Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image.

image str: URL of the Container image in Google Container Registry or Google Artifact Registry. More info: https://kubernetes.io/docs/concepts/containers/images
args Sequence[str]: Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
commands Sequence[str]: Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
depends_ons Sequence[str]
envs Sequence[ServiceTemplateContainerEnv]: List of environment variables to set in the container. Structure is documented below.
liveness_probe ServiceTemplateContainerLivenessProbe: Periodic probe of container liveness. Container will be restarted if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
name str: Name of the container specified as a DNS_LABEL.
ports Sequence[ServiceTemplateContainerPort]: List of ports to expose from the container. Only a single port can be specified. The specified ports must be listening on all interfaces (0.0.0.0) within the container to be accessible. If omitted, a port number will be chosen and passed to the container through the PORT environment variable for the container to listen on Structure is documented below.
resources ServiceTemplateContainerResources: Compute Resource requirements by this container. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources Structure is documented below.
startup_probe ServiceTemplateContainerStartupProbe: Startup probe of application within the container. All other probes are disabled if a startup probe is provided, until it succeeds. Container will not be added to service endpoints if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
volume_mounts Sequence[ServiceTemplateContainerVolumeMount]: Volume to mount into the container's filesystem. Structure is documented below.
working_dir str: Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image.

image String: URL of the Container image in Google Container Registry or Google Artifact Registry. More info: https://kubernetes.io/docs/concepts/containers/images
args List<String>: Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
commands List<String>: Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
dependsOns List<String>
envs List<Property Map>: List of environment variables to set in the container. Structure is documented below.
livenessProbe Property Map: Periodic probe of container liveness. Container will be restarted if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
name String: Name of the container specified as a DNS_LABEL.
ports List<Property Map>: List of ports to expose from the container. Only a single port can be specified. The specified ports must be listening on all interfaces (0.0.0.0) within the container to be accessible. If omitted, a port number will be chosen and passed to the container through the PORT environment variable for the container to listen on Structure is documented below.
resources Property Map: Compute Resource requirements by this container. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources Structure is documented below.
startupProbe Property Map: Startup probe of application within the container. All other probes are disabled if a startup probe is provided, until it succeeds. Container will not be added to service endpoints if the probe fails. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes Structure is documented below.
volumeMounts List<Property Map>: Volume to mount into the container's filesystem. Structure is documented below.
workingDir String: Container's working directory. If not specified, the container runtime's default will be used, which might be configured in the container image.

ServiceTemplateContainerEnv, ServiceTemplateContainerEnvArgs

Name string: Name of the environment variable. Must be a C_IDENTIFIER, and mnay not exceed 32768 characters.
Value string: Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any route environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "", and the maximum length is 32768 bytes
ValueSource ServiceTemplateContainerEnvValueSource: Source for the environment variable's value. Structure is documented below.

Name string: Name of the environment variable. Must be a C_IDENTIFIER, and mnay not exceed 32768 characters.
Value string: Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any route environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "", and the maximum length is 32768 bytes
ValueSource ServiceTemplateContainerEnvValueSource: Source for the environment variable's value. Structure is documented below.

name String: Name of the environment variable. Must be a C_IDENTIFIER, and mnay not exceed 32768 characters.
value String: Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any route environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "", and the maximum length is 32768 bytes
valueSource ServiceTemplateContainerEnvValueSource: Source for the environment variable's value. Structure is documented below.

name string: Name of the environment variable. Must be a C_IDENTIFIER, and mnay not exceed 32768 characters.
value string: Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any route environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "", and the maximum length is 32768 bytes
valueSource ServiceTemplateContainerEnvValueSource: Source for the environment variable's value. Structure is documented below.

name str: Name of the environment variable. Must be a C_IDENTIFIER, and mnay not exceed 32768 characters.
value str: Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any route environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "", and the maximum length is 32768 bytes
value_source ServiceTemplateContainerEnvValueSource: Source for the environment variable's value. Structure is documented below.

name String: Name of the environment variable. Must be a C_IDENTIFIER, and mnay not exceed 32768 characters.
value String: Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any route environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "", and the maximum length is 32768 bytes
valueSource Property Map: Source for the environment variable's value. Structure is documented below.

ServiceTemplateContainerEnvValueSource, ServiceTemplateContainerEnvValueSourceArgs

SecretKeyRef ServiceTemplateContainerEnvValueSourceSecretKeyRef: Selects a secret and a specific version from Cloud Secret Manager. Structure is documented below.

SecretKeyRef ServiceTemplateContainerEnvValueSourceSecretKeyRef: Selects a secret and a specific version from Cloud Secret Manager. Structure is documented below.

secretKeyRef ServiceTemplateContainerEnvValueSourceSecretKeyRef: Selects a secret and a specific version from Cloud Secret Manager. Structure is documented below.

secretKeyRef ServiceTemplateContainerEnvValueSourceSecretKeyRef: Selects a secret and a specific version from Cloud Secret Manager. Structure is documented below.

secret_key_ref ServiceTemplateContainerEnvValueSourceSecretKeyRef: Selects a secret and a specific version from Cloud Secret Manager. Structure is documented below.

secretKeyRef Property Map: Selects a secret and a specific version from Cloud Secret Manager. Structure is documented below.

ServiceTemplateContainerEnvValueSourceSecretKeyRef, ServiceTemplateContainerEnvValueSourceSecretKeyRefArgs

Secret string: The name of the secret in Cloud Secret Manager. Format: {secretName} if the secret is in the same project. projects/{project}/secrets/{secretName} if the secret is in a different project.
Version string: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version.

Secret string: The name of the secret in Cloud Secret Manager. Format: {secretName} if the secret is in the same project. projects/{project}/secrets/{secretName} if the secret is in a different project.
Version string: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version.

secret String: The name of the secret in Cloud Secret Manager. Format: {secretName} if the secret is in the same project. projects/{project}/secrets/{secretName} if the secret is in a different project.
version String: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version.

secret string: The name of the secret in Cloud Secret Manager. Format: {secretName} if the secret is in the same project. projects/{project}/secrets/{secretName} if the secret is in a different project.
version string: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version.

secret str: The name of the secret in Cloud Secret Manager. Format: {secretName} if the secret is in the same project. projects/{project}/secrets/{secretName} if the secret is in a different project.
version str: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version.

secret String: The name of the secret in Cloud Secret Manager. Format: {secretName} if the secret is in the same project. projects/{project}/secrets/{secretName} if the secret is in a different project.
version String: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version.

ServiceTemplateContainerLivenessProbe, ServiceTemplateContainerLivenessProbeArgs

FailureThreshold int

Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.

Grpc ServiceTemplateContainerLivenessProbeGrpc

GRPC specifies an action involving a GRPC port. Structure is documented below.

HttpGet ServiceTemplateContainerLivenessProbeHttpGet

HTTPGet specifies the http request to perform. Structure is documented below.

InitialDelaySeconds int

Number of seconds after the container has started before the probe is initiated. Defaults to 0 seconds. Minimum value is 0. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes

PeriodSeconds int

How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. Must be greater or equal than timeoutSeconds

TcpSocket ServiceTemplateContainerLivenessProbeTcpSocket

(Optional, Deprecated) TCPSocket specifies an action involving a TCP port. This field is not supported in liveness probe currently. Structure is documented below.

Warning: tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

Deprecated:

tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

TimeoutSeconds int

Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. Maximum value is 3600. Must be smaller than periodSeconds. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes

FailureThreshold int

Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.

Grpc ServiceTemplateContainerLivenessProbeGrpc

GRPC specifies an action involving a GRPC port. Structure is documented below.

HttpGet ServiceTemplateContainerLivenessProbeHttpGet

HTTPGet specifies the http request to perform. Structure is documented below.

InitialDelaySeconds int

PeriodSeconds int

TcpSocket ServiceTemplateContainerLivenessProbeTcpSocket

(Optional, Deprecated) TCPSocket specifies an action involving a TCP port. This field is not supported in liveness probe currently. Structure is documented below.

Warning: tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

Deprecated:

tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

TimeoutSeconds int

failureThreshold Integer

Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.

grpc ServiceTemplateContainerLivenessProbeGrpc

GRPC specifies an action involving a GRPC port. Structure is documented below.

httpGet ServiceTemplateContainerLivenessProbeHttpGet

HTTPGet specifies the http request to perform. Structure is documented below.

initialDelaySeconds Integer

periodSeconds Integer

tcpSocket ServiceTemplateContainerLivenessProbeTcpSocket

(Optional, Deprecated) TCPSocket specifies an action involving a TCP port. This field is not supported in liveness probe currently. Structure is documented below.

Warning: tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

Deprecated:

tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

timeoutSeconds Integer

failureThreshold number

Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.

grpc ServiceTemplateContainerLivenessProbeGrpc

GRPC specifies an action involving a GRPC port. Structure is documented below.

httpGet ServiceTemplateContainerLivenessProbeHttpGet

HTTPGet specifies the http request to perform. Structure is documented below.

initialDelaySeconds number

periodSeconds number

tcpSocket ServiceTemplateContainerLivenessProbeTcpSocket

(Optional, Deprecated) TCPSocket specifies an action involving a TCP port. This field is not supported in liveness probe currently. Structure is documented below.

Warning: tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

Deprecated:

tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

timeoutSeconds number

failure_threshold int

Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.

grpc ServiceTemplateContainerLivenessProbeGrpc

GRPC specifies an action involving a GRPC port. Structure is documented below.

http_get ServiceTemplateContainerLivenessProbeHttpGet

HTTPGet specifies the http request to perform. Structure is documented below.

initial_delay_seconds int

period_seconds int

tcp_socket ServiceTemplateContainerLivenessProbeTcpSocket

(Optional, Deprecated) TCPSocket specifies an action involving a TCP port. This field is not supported in liveness probe currently. Structure is documented below.

Warning: tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

Deprecated:

tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

timeout_seconds int

failureThreshold Number

Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.

grpc Property Map

GRPC specifies an action involving a GRPC port. Structure is documented below.

httpGet Property Map

HTTPGet specifies the http request to perform. Structure is documented below.

initialDelaySeconds Number

periodSeconds Number

tcpSocket Property Map

(Optional, Deprecated) TCPSocket specifies an action involving a TCP port. This field is not supported in liveness probe currently. Structure is documented below.

Warning: tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

Deprecated:

tcp_socket is deprecated and will be removed in a future major release. This field is not supported by the Cloud Run API.

timeoutSeconds Number

ServiceTemplateContainerLivenessProbeGrpc, ServiceTemplateContainerLivenessProbeGrpcArgs

Port int: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
Service string: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

Port int: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
Service string: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

port Integer: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
service String: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

port number: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
service string: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

port int: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
service str: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

port Number: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
service String: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

ServiceTemplateContainerLivenessProbeHttpGet, ServiceTemplateContainerLivenessProbeHttpGetArgs

HttpHeaders List<ServiceTemplateContainerLivenessProbeHttpGetHttpHeader>: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
Path string: Path to access on the HTTP server. Defaults to '/'.
Port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

HttpHeaders []ServiceTemplateContainerLivenessProbeHttpGetHttpHeader: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
Path string: Path to access on the HTTP server. Defaults to '/'.
Port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

httpHeaders List<ServiceTemplateContainerLivenessProbeHttpGetHttpHeader>: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
path String: Path to access on the HTTP server. Defaults to '/'.
port Integer: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

httpHeaders ServiceTemplateContainerLivenessProbeHttpGetHttpHeader[]: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
path string: Path to access on the HTTP server. Defaults to '/'.
port number: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

http_headers Sequence[ServiceTemplateContainerLivenessProbeHttpGetHttpHeader]: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
path str: Path to access on the HTTP server. Defaults to '/'.
port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

httpHeaders List<Property Map>: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
path String: Path to access on the HTTP server. Defaults to '/'.
port Number: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

ServiceTemplateContainerLivenessProbeHttpGetHttpHeader, ServiceTemplateContainerLivenessProbeHttpGetHttpHeaderArgs

Name string: The header field name
Value string: The header field value

Name string: The header field name
Value string: The header field value

name String: The header field name
value String: The header field value

name string: The header field name
value string: The header field value

name str: The header field name
value str: The header field value

name String: The header field name
value String: The header field value

ServiceTemplateContainerLivenessProbeTcpSocket, ServiceTemplateContainerLivenessProbeTcpSocketArgs

Port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

Port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

port Integer: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

port number: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

port Number: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

ServiceTemplateContainerPort, ServiceTemplateContainerPortArgs

ContainerPort int: Port number the container listens on. This must be a valid TCP port number, 0 < containerPort < 65536.
Name string: If specified, used to specify which protocol to use. Allowed values are "http1" and "h2c".

ContainerPort int: Port number the container listens on. This must be a valid TCP port number, 0 < containerPort < 65536.
Name string: If specified, used to specify which protocol to use. Allowed values are "http1" and "h2c".

containerPort Integer: Port number the container listens on. This must be a valid TCP port number, 0 < containerPort < 65536.
name String: If specified, used to specify which protocol to use. Allowed values are "http1" and "h2c".

containerPort number: Port number the container listens on. This must be a valid TCP port number, 0 < containerPort < 65536.
name string: If specified, used to specify which protocol to use. Allowed values are "http1" and "h2c".

container_port int: Port number the container listens on. This must be a valid TCP port number, 0 < containerPort < 65536.
name str: If specified, used to specify which protocol to use. Allowed values are "http1" and "h2c".

containerPort Number: Port number the container listens on. This must be a valid TCP port number, 0 < containerPort < 65536.
name String: If specified, used to specify which protocol to use. Allowed values are "http1" and "h2c".

ServiceTemplateContainerResources, ServiceTemplateContainerResourcesArgs

CpuIdle bool: Determines whether CPU should be throttled or not outside of requests.
Limits Dictionary<string, string>: Only memory and CPU are supported. Note: The only supported values for CPU are '1', '2', '4', and '8'. Setting 4 CPU requires at least 2Gi of memory. The values of the map is string form of the 'quantity' k8s type: https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apimachinery/pkg/api/resource/quantity.go
StartupCpuBoost bool: Determines whether CPU should be boosted on startup of a new container instance above the requested CPU threshold, this can help reduce cold-start latency.

CpuIdle bool: Determines whether CPU should be throttled or not outside of requests.
Limits map[string]string: Only memory and CPU are supported. Note: The only supported values for CPU are '1', '2', '4', and '8'. Setting 4 CPU requires at least 2Gi of memory. The values of the map is string form of the 'quantity' k8s type: https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apimachinery/pkg/api/resource/quantity.go
StartupCpuBoost bool: Determines whether CPU should be boosted on startup of a new container instance above the requested CPU threshold, this can help reduce cold-start latency.

cpuIdle Boolean: Determines whether CPU should be throttled or not outside of requests.
limits Map<String,String>: Only memory and CPU are supported. Note: The only supported values for CPU are '1', '2', '4', and '8'. Setting 4 CPU requires at least 2Gi of memory. The values of the map is string form of the 'quantity' k8s type: https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apimachinery/pkg/api/resource/quantity.go
startupCpuBoost Boolean: Determines whether CPU should be boosted on startup of a new container instance above the requested CPU threshold, this can help reduce cold-start latency.

cpuIdle boolean: Determines whether CPU should be throttled or not outside of requests.
limits {[key: string]: string}: Only memory and CPU are supported. Note: The only supported values for CPU are '1', '2', '4', and '8'. Setting 4 CPU requires at least 2Gi of memory. The values of the map is string form of the 'quantity' k8s type: https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apimachinery/pkg/api/resource/quantity.go
startupCpuBoost boolean: Determines whether CPU should be boosted on startup of a new container instance above the requested CPU threshold, this can help reduce cold-start latency.

cpu_idle bool: Determines whether CPU should be throttled or not outside of requests.
limits Mapping[str, str]: Only memory and CPU are supported. Note: The only supported values for CPU are '1', '2', '4', and '8'. Setting 4 CPU requires at least 2Gi of memory. The values of the map is string form of the 'quantity' k8s type: https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apimachinery/pkg/api/resource/quantity.go
startup_cpu_boost bool: Determines whether CPU should be boosted on startup of a new container instance above the requested CPU threshold, this can help reduce cold-start latency.

cpuIdle Boolean: Determines whether CPU should be throttled or not outside of requests.
limits Map<String>: Only memory and CPU are supported. Note: The only supported values for CPU are '1', '2', '4', and '8'. Setting 4 CPU requires at least 2Gi of memory. The values of the map is string form of the 'quantity' k8s type: https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apimachinery/pkg/api/resource/quantity.go
startupCpuBoost Boolean: Determines whether CPU should be boosted on startup of a new container instance above the requested CPU threshold, this can help reduce cold-start latency.

ServiceTemplateContainerStartupProbe, ServiceTemplateContainerStartupProbeArgs

FailureThreshold int: Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
Grpc ServiceTemplateContainerStartupProbeGrpc: GRPC specifies an action involving a GRPC port. Structure is documented below.
HttpGet ServiceTemplateContainerStartupProbeHttpGet: HTTPGet specifies the http request to perform. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
InitialDelaySeconds int: Number of seconds after the container has started before the probe is initiated. Defaults to 0 seconds. Minimum value is 0. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
PeriodSeconds int: How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. Must be greater or equal than timeoutSeconds
TcpSocket ServiceTemplateContainerStartupProbeTcpSocket: TCPSocket specifies an action involving a TCP port. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
TimeoutSeconds int: Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. Maximum value is 3600. Must be smaller than periodSeconds. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes

FailureThreshold int: Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
Grpc ServiceTemplateContainerStartupProbeGrpc: GRPC specifies an action involving a GRPC port. Structure is documented below.
HttpGet ServiceTemplateContainerStartupProbeHttpGet: HTTPGet specifies the http request to perform. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
InitialDelaySeconds int: Number of seconds after the container has started before the probe is initiated. Defaults to 0 seconds. Minimum value is 0. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
PeriodSeconds int: How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. Must be greater or equal than timeoutSeconds
TcpSocket ServiceTemplateContainerStartupProbeTcpSocket: TCPSocket specifies an action involving a TCP port. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
TimeoutSeconds int: Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. Maximum value is 3600. Must be smaller than periodSeconds. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes

failureThreshold Integer: Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
grpc ServiceTemplateContainerStartupProbeGrpc: GRPC specifies an action involving a GRPC port. Structure is documented below.
httpGet ServiceTemplateContainerStartupProbeHttpGet: HTTPGet specifies the http request to perform. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
initialDelaySeconds Integer: Number of seconds after the container has started before the probe is initiated. Defaults to 0 seconds. Minimum value is 0. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
periodSeconds Integer: How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. Must be greater or equal than timeoutSeconds
tcpSocket ServiceTemplateContainerStartupProbeTcpSocket: TCPSocket specifies an action involving a TCP port. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
timeoutSeconds Integer: Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. Maximum value is 3600. Must be smaller than periodSeconds. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes

failureThreshold number: Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
grpc ServiceTemplateContainerStartupProbeGrpc: GRPC specifies an action involving a GRPC port. Structure is documented below.
httpGet ServiceTemplateContainerStartupProbeHttpGet: HTTPGet specifies the http request to perform. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
initialDelaySeconds number: Number of seconds after the container has started before the probe is initiated. Defaults to 0 seconds. Minimum value is 0. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
periodSeconds number: How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. Must be greater or equal than timeoutSeconds
tcpSocket ServiceTemplateContainerStartupProbeTcpSocket: TCPSocket specifies an action involving a TCP port. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
timeoutSeconds number: Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. Maximum value is 3600. Must be smaller than periodSeconds. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes

failure_threshold int: Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
grpc ServiceTemplateContainerStartupProbeGrpc: GRPC specifies an action involving a GRPC port. Structure is documented below.
http_get ServiceTemplateContainerStartupProbeHttpGet: HTTPGet specifies the http request to perform. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
initial_delay_seconds int: Number of seconds after the container has started before the probe is initiated. Defaults to 0 seconds. Minimum value is 0. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
period_seconds int: How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. Must be greater or equal than timeoutSeconds
tcp_socket ServiceTemplateContainerStartupProbeTcpSocket: TCPSocket specifies an action involving a TCP port. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
timeout_seconds int: Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. Maximum value is 3600. Must be smaller than periodSeconds. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes

failureThreshold Number: Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1.
grpc Property Map: GRPC specifies an action involving a GRPC port. Structure is documented below.
httpGet Property Map: HTTPGet specifies the http request to perform. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
initialDelaySeconds Number: Number of seconds after the container has started before the probe is initiated. Defaults to 0 seconds. Minimum value is 0. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
periodSeconds Number: How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. Maximum value for liveness probe is 3600. Maximum value for startup probe is 240. Must be greater or equal than timeoutSeconds
tcpSocket Property Map: TCPSocket specifies an action involving a TCP port. Exactly one of HTTPGet or TCPSocket must be specified. Structure is documented below.
timeoutSeconds Number: Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. Maximum value is 3600. Must be smaller than periodSeconds. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes

ServiceTemplateContainerStartupProbeGrpc, ServiceTemplateContainerStartupProbeGrpcArgs

Port int: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
Service string: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

Port int: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
Service string: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

port Integer: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
service String: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

port number: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
service string: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

port int: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
service str: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

port Number: Port number to access on the container. Number must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.
service String: The name of the service to place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md). If this is not specified, the default behavior is defined by gRPC.

ServiceTemplateContainerStartupProbeHttpGet, ServiceTemplateContainerStartupProbeHttpGetArgs

HttpHeaders List<ServiceTemplateContainerStartupProbeHttpGetHttpHeader>: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
Path string: Path to access on the HTTP server. Defaults to '/'.
Port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

HttpHeaders []ServiceTemplateContainerStartupProbeHttpGetHttpHeader: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
Path string: Path to access on the HTTP server. Defaults to '/'.
Port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

httpHeaders List<ServiceTemplateContainerStartupProbeHttpGetHttpHeader>: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
path String: Path to access on the HTTP server. Defaults to '/'.
port Integer: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

httpHeaders ServiceTemplateContainerStartupProbeHttpGetHttpHeader[]: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
path string: Path to access on the HTTP server. Defaults to '/'.
port number: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

http_headers Sequence[ServiceTemplateContainerStartupProbeHttpGetHttpHeader]: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
path str: Path to access on the HTTP server. Defaults to '/'.
port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

httpHeaders List<Property Map>: Custom headers to set in the request. HTTP allows repeated headers. Structure is documented below.
path String: Path to access on the HTTP server. Defaults to '/'.
port Number: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

ServiceTemplateContainerStartupProbeHttpGetHttpHeader, ServiceTemplateContainerStartupProbeHttpGetHttpHeaderArgs

Name string: The header field name
Value string: The header field value

Name string: The header field name
Value string: The header field value

name String: The header field name
value String: The header field value

name string: The header field name
value string: The header field value

name str: The header field name
value str: The header field value

name String: The header field name
value String: The header field value

ServiceTemplateContainerStartupProbeTcpSocket, ServiceTemplateContainerStartupProbeTcpSocketArgs

Port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

Port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

port Integer: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

port number: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

port int: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

port Number: Port number to access on the container. Must be in the range 1 to 65535. If not specified, defaults to the same value as container.ports[0].containerPort.

ServiceTemplateContainerVolumeMount, ServiceTemplateContainerVolumeMountArgs

MountPath string: Path within the container at which the volume should be mounted. Must not contain ':'. For Cloud SQL volumes, it can be left empty, or must otherwise be /cloudsql. All instances defined in the Volume will be available as /cloudsql/[instance]. For more information on Cloud SQL volumes, visit https://cloud.google.com/sql/docs/mysql/connect-run
Name string: This must match the Name of a Volume.

MountPath string: Path within the container at which the volume should be mounted. Must not contain ':'. For Cloud SQL volumes, it can be left empty, or must otherwise be /cloudsql. All instances defined in the Volume will be available as /cloudsql/[instance]. For more information on Cloud SQL volumes, visit https://cloud.google.com/sql/docs/mysql/connect-run
Name string: This must match the Name of a Volume.

mountPath String: Path within the container at which the volume should be mounted. Must not contain ':'. For Cloud SQL volumes, it can be left empty, or must otherwise be /cloudsql. All instances defined in the Volume will be available as /cloudsql/[instance]. For more information on Cloud SQL volumes, visit https://cloud.google.com/sql/docs/mysql/connect-run
name String: This must match the Name of a Volume.

mountPath string: Path within the container at which the volume should be mounted. Must not contain ':'. For Cloud SQL volumes, it can be left empty, or must otherwise be /cloudsql. All instances defined in the Volume will be available as /cloudsql/[instance]. For more information on Cloud SQL volumes, visit https://cloud.google.com/sql/docs/mysql/connect-run
name string: This must match the Name of a Volume.

mount_path str: Path within the container at which the volume should be mounted. Must not contain ':'. For Cloud SQL volumes, it can be left empty, or must otherwise be /cloudsql. All instances defined in the Volume will be available as /cloudsql/[instance]. For more information on Cloud SQL volumes, visit https://cloud.google.com/sql/docs/mysql/connect-run
name str: This must match the Name of a Volume.

mountPath String: Path within the container at which the volume should be mounted. Must not contain ':'. For Cloud SQL volumes, it can be left empty, or must otherwise be /cloudsql. All instances defined in the Volume will be available as /cloudsql/[instance]. For more information on Cloud SQL volumes, visit https://cloud.google.com/sql/docs/mysql/connect-run
name String: This must match the Name of a Volume.

ServiceTemplateScaling, ServiceTemplateScalingArgs

MaxInstanceCount int: Maximum number of serving instances that this resource should have.
MinInstanceCount int: Minimum number of serving instances that this resource should have.

MaxInstanceCount int: Maximum number of serving instances that this resource should have.
MinInstanceCount int: Minimum number of serving instances that this resource should have.

maxInstanceCount Integer: Maximum number of serving instances that this resource should have.
minInstanceCount Integer: Minimum number of serving instances that this resource should have.

maxInstanceCount number: Maximum number of serving instances that this resource should have.
minInstanceCount number: Minimum number of serving instances that this resource should have.

max_instance_count int: Maximum number of serving instances that this resource should have.
min_instance_count int: Minimum number of serving instances that this resource should have.

maxInstanceCount Number: Maximum number of serving instances that this resource should have.
minInstanceCount Number: Minimum number of serving instances that this resource should have.

ServiceTemplateVolume, ServiceTemplateVolumeArgs

Name string: Volume's name.
CloudSqlInstance ServiceTemplateVolumeCloudSqlInstance: For Cloud SQL volumes, contains the specific instances that should be mounted. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Structure is documented below.
EmptyDir ServiceTemplateVolumeEmptyDir
Secret ServiceTemplateVolumeSecret: Secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret Structure is documented below.

Name string: Volume's name.
CloudSqlInstance ServiceTemplateVolumeCloudSqlInstance: For Cloud SQL volumes, contains the specific instances that should be mounted. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Structure is documented below.
EmptyDir ServiceTemplateVolumeEmptyDir
Secret ServiceTemplateVolumeSecret: Secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret Structure is documented below.

name String: Volume's name.
cloudSqlInstance ServiceTemplateVolumeCloudSqlInstance: For Cloud SQL volumes, contains the specific instances that should be mounted. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Structure is documented below.
emptyDir ServiceTemplateVolumeEmptyDir
secret ServiceTemplateVolumeSecret: Secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret Structure is documented below.

name string: Volume's name.
cloudSqlInstance ServiceTemplateVolumeCloudSqlInstance: For Cloud SQL volumes, contains the specific instances that should be mounted. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Structure is documented below.
emptyDir ServiceTemplateVolumeEmptyDir
secret ServiceTemplateVolumeSecret: Secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret Structure is documented below.

name str: Volume's name.
cloud_sql_instance ServiceTemplateVolumeCloudSqlInstance: For Cloud SQL volumes, contains the specific instances that should be mounted. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Structure is documented below.
empty_dir ServiceTemplateVolumeEmptyDir
secret ServiceTemplateVolumeSecret: Secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret Structure is documented below.

name String: Volume's name.
cloudSqlInstance Property Map: For Cloud SQL volumes, contains the specific instances that should be mounted. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Structure is documented below.
emptyDir Property Map
secret Property Map: Secret represents a secret that should populate this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret Structure is documented below.

ServiceTemplateVolumeCloudSqlInstance, ServiceTemplateVolumeCloudSqlInstanceArgs

Instances List<string>: The Cloud SQL instance connection names, as can be found in https://console.cloud.google.com/sql/instances. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Format: {project}:{location}:{instance}

Instances []string: The Cloud SQL instance connection names, as can be found in https://console.cloud.google.com/sql/instances. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Format: {project}:{location}:{instance}

instances List<String>: The Cloud SQL instance connection names, as can be found in https://console.cloud.google.com/sql/instances. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Format: {project}:{location}:{instance}

instances string[]: The Cloud SQL instance connection names, as can be found in https://console.cloud.google.com/sql/instances. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Format: {project}:{location}:{instance}

instances Sequence[str]: The Cloud SQL instance connection names, as can be found in https://console.cloud.google.com/sql/instances. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Format: {project}:{location}:{instance}

instances List<String>: The Cloud SQL instance connection names, as can be found in https://console.cloud.google.com/sql/instances. Visit https://cloud.google.com/sql/docs/mysql/connect-run for more information on how to connect Cloud SQL and Cloud Run. Format: {project}:{location}:{instance}

ServiceTemplateVolumeEmptyDir, ServiceTemplateVolumeEmptyDirArgs

Medium string: The different types of medium supported for EmptyDir. Default value is MEMORY. Possible values are: MEMORY.
SizeLimit string: Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.

Medium string: The different types of medium supported for EmptyDir. Default value is MEMORY. Possible values are: MEMORY.
SizeLimit string: Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.

medium String: The different types of medium supported for EmptyDir. Default value is MEMORY. Possible values are: MEMORY.
sizeLimit String: Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.

medium string: The different types of medium supported for EmptyDir. Default value is MEMORY. Possible values are: MEMORY.
sizeLimit string: Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.

medium str: The different types of medium supported for EmptyDir. Default value is MEMORY. Possible values are: MEMORY.
size_limit str: Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.

medium String: The different types of medium supported for EmptyDir. Default value is MEMORY. Possible values are: MEMORY.
sizeLimit String: Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.

ServiceTemplateVolumeSecret, ServiceTemplateVolumeSecretArgs

Secret string: The name of the secret in Cloud Secret Manager. Format: {secret} if the secret is in the same project. projects/{project}/secrets/{secret} if the secret is in a different project.
DefaultMode int: Integer representation of mode bits to use on created files by default. Must be a value between 0000 and 0777 (octal), defaulting to 0444. Directories within the path are not affected by this setting.
Items List<ServiceTemplateVolumeSecretItem>: If unspecified, the volume will expose a file whose name is the secret, relative to VolumeMount.mount_path. If specified, the key will be used as the version to fetch from Cloud Secret Manager and the path will be the name of the file exposed in the volume. When items are defined, they must specify a path and a version. Structure is documented below.

Secret string: The name of the secret in Cloud Secret Manager. Format: {secret} if the secret is in the same project. projects/{project}/secrets/{secret} if the secret is in a different project.
DefaultMode int: Integer representation of mode bits to use on created files by default. Must be a value between 0000 and 0777 (octal), defaulting to 0444. Directories within the path are not affected by this setting.
Items []ServiceTemplateVolumeSecretItem: If unspecified, the volume will expose a file whose name is the secret, relative to VolumeMount.mount_path. If specified, the key will be used as the version to fetch from Cloud Secret Manager and the path will be the name of the file exposed in the volume. When items are defined, they must specify a path and a version. Structure is documented below.

secret String: The name of the secret in Cloud Secret Manager. Format: {secret} if the secret is in the same project. projects/{project}/secrets/{secret} if the secret is in a different project.
defaultMode Integer: Integer representation of mode bits to use on created files by default. Must be a value between 0000 and 0777 (octal), defaulting to 0444. Directories within the path are not affected by this setting.
items List<ServiceTemplateVolumeSecretItem>: If unspecified, the volume will expose a file whose name is the secret, relative to VolumeMount.mount_path. If specified, the key will be used as the version to fetch from Cloud Secret Manager and the path will be the name of the file exposed in the volume. When items are defined, they must specify a path and a version. Structure is documented below.

secret string: The name of the secret in Cloud Secret Manager. Format: {secret} if the secret is in the same project. projects/{project}/secrets/{secret} if the secret is in a different project.
defaultMode number: Integer representation of mode bits to use on created files by default. Must be a value between 0000 and 0777 (octal), defaulting to 0444. Directories within the path are not affected by this setting.
items ServiceTemplateVolumeSecretItem[]: If unspecified, the volume will expose a file whose name is the secret, relative to VolumeMount.mount_path. If specified, the key will be used as the version to fetch from Cloud Secret Manager and the path will be the name of the file exposed in the volume. When items are defined, they must specify a path and a version. Structure is documented below.

secret str: The name of the secret in Cloud Secret Manager. Format: {secret} if the secret is in the same project. projects/{project}/secrets/{secret} if the secret is in a different project.
default_mode int: Integer representation of mode bits to use on created files by default. Must be a value between 0000 and 0777 (octal), defaulting to 0444. Directories within the path are not affected by this setting.
items Sequence[ServiceTemplateVolumeSecretItem]: If unspecified, the volume will expose a file whose name is the secret, relative to VolumeMount.mount_path. If specified, the key will be used as the version to fetch from Cloud Secret Manager and the path will be the name of the file exposed in the volume. When items are defined, they must specify a path and a version. Structure is documented below.

secret String: The name of the secret in Cloud Secret Manager. Format: {secret} if the secret is in the same project. projects/{project}/secrets/{secret} if the secret is in a different project.
defaultMode Number: Integer representation of mode bits to use on created files by default. Must be a value between 0000 and 0777 (octal), defaulting to 0444. Directories within the path are not affected by this setting.
items List<Property Map>: If unspecified, the volume will expose a file whose name is the secret, relative to VolumeMount.mount_path. If specified, the key will be used as the version to fetch from Cloud Secret Manager and the path will be the name of the file exposed in the volume. When items are defined, they must specify a path and a version. Structure is documented below.

ServiceTemplateVolumeSecretItem, ServiceTemplateVolumeSecretItemArgs

Path string: The relative path of the secret in the container.
Mode int: Integer octal mode bits to use on this file, must be a value between 01 and 0777 (octal). If 0 or not set, the Volume's default mode will be used.
Version string: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version

Path string: The relative path of the secret in the container.
Mode int: Integer octal mode bits to use on this file, must be a value between 01 and 0777 (octal). If 0 or not set, the Volume's default mode will be used.
Version string: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version

path String: The relative path of the secret in the container.
mode Integer: Integer octal mode bits to use on this file, must be a value between 01 and 0777 (octal). If 0 or not set, the Volume's default mode will be used.
version String: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version

path string: The relative path of the secret in the container.
mode number: Integer octal mode bits to use on this file, must be a value between 01 and 0777 (octal). If 0 or not set, the Volume's default mode will be used.
version string: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version

path str: The relative path of the secret in the container.
mode int: Integer octal mode bits to use on this file, must be a value between 01 and 0777 (octal). If 0 or not set, the Volume's default mode will be used.
version str: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version

path String: The relative path of the secret in the container.
mode Number: Integer octal mode bits to use on this file, must be a value between 01 and 0777 (octal). If 0 or not set, the Volume's default mode will be used.
version String: The Cloud Secret Manager secret version. Can be 'latest' for the latest value or an integer for a specific version

ServiceTemplateVpcAccess, ServiceTemplateVpcAccessArgs

Connector string: VPC Access connector name. Format: projects/{project}/locations/{location}/connectors/{connector}, where {project} can be project id or number.
Egress string: Traffic VPC egress settings. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
NetworkInterfaces List<ServiceTemplateVpcAccessNetworkInterface>: Direct VPC egress settings. Currently only single network interface is supported. Structure is documented below.

Connector string: VPC Access connector name. Format: projects/{project}/locations/{location}/connectors/{connector}, where {project} can be project id or number.
Egress string: Traffic VPC egress settings. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
NetworkInterfaces []ServiceTemplateVpcAccessNetworkInterface: Direct VPC egress settings. Currently only single network interface is supported. Structure is documented below.

connector String: VPC Access connector name. Format: projects/{project}/locations/{location}/connectors/{connector}, where {project} can be project id or number.
egress String: Traffic VPC egress settings. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
networkInterfaces List<ServiceTemplateVpcAccessNetworkInterface>: Direct VPC egress settings. Currently only single network interface is supported. Structure is documented below.

connector string: VPC Access connector name. Format: projects/{project}/locations/{location}/connectors/{connector}, where {project} can be project id or number.
egress string: Traffic VPC egress settings. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
networkInterfaces ServiceTemplateVpcAccessNetworkInterface[]: Direct VPC egress settings. Currently only single network interface is supported. Structure is documented below.

connector str: VPC Access connector name. Format: projects/{project}/locations/{location}/connectors/{connector}, where {project} can be project id or number.
egress str: Traffic VPC egress settings. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
network_interfaces Sequence[ServiceTemplateVpcAccessNetworkInterface]: Direct VPC egress settings. Currently only single network interface is supported. Structure is documented below.

connector String: VPC Access connector name. Format: projects/{project}/locations/{location}/connectors/{connector}, where {project} can be project id or number.
egress String: Traffic VPC egress settings. Possible values are: ALL_TRAFFIC, PRIVATE_RANGES_ONLY.
networkInterfaces List<Property Map>: Direct VPC egress settings. Currently only single network interface is supported. Structure is documented below.

ServiceTemplateVpcAccessNetworkInterface, ServiceTemplateVpcAccessNetworkInterfaceArgs

Network string: The VPC network that the Cloud Run resource will be able to send traffic to. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If network is not specified, it will be looked up from the subnetwork.
Subnetwork string: The VPC subnetwork that the Cloud Run resource will get IPs from. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If subnetwork is not specified, the subnetwork with the same name with the network will be used.
Tags List<string>: Network tags applied to this Cloud Run service.

Network string: The VPC network that the Cloud Run resource will be able to send traffic to. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If network is not specified, it will be looked up from the subnetwork.
Subnetwork string: The VPC subnetwork that the Cloud Run resource will get IPs from. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If subnetwork is not specified, the subnetwork with the same name with the network will be used.
Tags []string: Network tags applied to this Cloud Run service.

network String: The VPC network that the Cloud Run resource will be able to send traffic to. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If network is not specified, it will be looked up from the subnetwork.
subnetwork String: The VPC subnetwork that the Cloud Run resource will get IPs from. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If subnetwork is not specified, the subnetwork with the same name with the network will be used.
tags List<String>: Network tags applied to this Cloud Run service.

network string: The VPC network that the Cloud Run resource will be able to send traffic to. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If network is not specified, it will be looked up from the subnetwork.
subnetwork string: The VPC subnetwork that the Cloud Run resource will get IPs from. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If subnetwork is not specified, the subnetwork with the same name with the network will be used.
tags string[]: Network tags applied to this Cloud Run service.

network str: The VPC network that the Cloud Run resource will be able to send traffic to. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If network is not specified, it will be looked up from the subnetwork.
subnetwork str: The VPC subnetwork that the Cloud Run resource will get IPs from. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If subnetwork is not specified, the subnetwork with the same name with the network will be used.
tags Sequence[str]: Network tags applied to this Cloud Run service.

network String: The VPC network that the Cloud Run resource will be able to send traffic to. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If network is not specified, it will be looked up from the subnetwork.
subnetwork String: The VPC subnetwork that the Cloud Run resource will get IPs from. At least one of network or subnetwork must be specified. If both network and subnetwork are specified, the given VPC subnetwork must belong to the given VPC network. If subnetwork is not specified, the subnetwork with the same name with the network will be used.
tags List<String>: Network tags applied to this Cloud Run service.

ServiceTerminalCondition, ServiceTerminalConditionArgs

ExecutionReason string: (Output) A reason for the execution condition.
LastTransitionTime string: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Message string: (Output) Human readable message indicating details about the current status.
Reason string: (Output) A common (service-level) reason for this condition.
RevisionReason string: (Output) A reason for the revision condition.
Severity string: (Output) How to interpret failures of this condition, one of Error, Warning, Info
State string: (Output) State of the condition.
Type string: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

ExecutionReason string: (Output) A reason for the execution condition.
LastTransitionTime string: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
Message string: (Output) Human readable message indicating details about the current status.
Reason string: (Output) A common (service-level) reason for this condition.
RevisionReason string: (Output) A reason for the revision condition.
Severity string: (Output) How to interpret failures of this condition, one of Error, Warning, Info
State string: (Output) State of the condition.
Type string: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

executionReason String: (Output) A reason for the execution condition.
lastTransitionTime String: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
message String: (Output) Human readable message indicating details about the current status.
reason String: (Output) A common (service-level) reason for this condition.
revisionReason String: (Output) A reason for the revision condition.
severity String: (Output) How to interpret failures of this condition, one of Error, Warning, Info
state String: (Output) State of the condition.
type String: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

executionReason string: (Output) A reason for the execution condition.
lastTransitionTime string: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
message string: (Output) Human readable message indicating details about the current status.
reason string: (Output) A common (service-level) reason for this condition.
revisionReason string: (Output) A reason for the revision condition.
severity string: (Output) How to interpret failures of this condition, one of Error, Warning, Info
state string: (Output) State of the condition.
type string: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

execution_reason str: (Output) A reason for the execution condition.
last_transition_time str: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
message str: (Output) Human readable message indicating details about the current status.
reason str: (Output) A common (service-level) reason for this condition.
revision_reason str: (Output) A reason for the revision condition.
severity str: (Output) How to interpret failures of this condition, one of Error, Warning, Info
state str: (Output) State of the condition.
type str: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

executionReason String: (Output) A reason for the execution condition.
lastTransitionTime String: (Output) Last time the condition transitioned from one status to another. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
message String: (Output) Human readable message indicating details about the current status.
reason String: (Output) A common (service-level) reason for this condition.
revisionReason String: (Output) A reason for the revision condition.
severity String: (Output) How to interpret failures of this condition, one of Error, Warning, Info
state String: (Output) State of the condition.
type String: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

ServiceTraffic, ServiceTrafficArgs

Percent int: Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.
Revision string: Revision to which to send this portion of traffic, if traffic allocation is by revision.
Tag string: Indicates a string to be part of the URI to exclusively reference this target.
Type string: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

Percent int: Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.
Revision string: Revision to which to send this portion of traffic, if traffic allocation is by revision.
Tag string: Indicates a string to be part of the URI to exclusively reference this target.
Type string: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

percent Integer: Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.
revision String: Revision to which to send this portion of traffic, if traffic allocation is by revision.
tag String: Indicates a string to be part of the URI to exclusively reference this target.
type String: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

percent number: Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.
revision string: Revision to which to send this portion of traffic, if traffic allocation is by revision.
tag string: Indicates a string to be part of the URI to exclusively reference this target.
type string: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

percent int: Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.
revision str: Revision to which to send this portion of traffic, if traffic allocation is by revision.
tag str: Indicates a string to be part of the URI to exclusively reference this target.
type str: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

percent Number: Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.
revision String: Revision to which to send this portion of traffic, if traffic allocation is by revision.
tag String: Indicates a string to be part of the URI to exclusively reference this target.
type String: The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

ServiceTrafficStatus, ServiceTrafficStatusArgs

Percent int

Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.

Revision string

The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.

(Optional) Revision to which to send this portion of traffic, if traffic allocation is by revision.

Tag string

Indicates a string to be part of the URI to exclusively reference this target.

Type string

The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

Uri string

(Output) Displays the target URI.

Percent int

Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.

Revision string

The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.

(Optional) Revision to which to send this portion of traffic, if traffic allocation is by revision.

Tag string

Indicates a string to be part of the URI to exclusively reference this target.

Type string

The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

Uri string

(Output) Displays the target URI.

percent Integer

Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.

revision String

The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.

(Optional) Revision to which to send this portion of traffic, if traffic allocation is by revision.

tag String

Indicates a string to be part of the URI to exclusively reference this target.

type String

The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

uri String

(Output) Displays the target URI.

percent number

Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.

revision string

The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.

(Optional) Revision to which to send this portion of traffic, if traffic allocation is by revision.

tag string

Indicates a string to be part of the URI to exclusively reference this target.

type string

The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

uri string

(Output) Displays the target URI.

percent int

Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.

revision str

The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.

(Optional) Revision to which to send this portion of traffic, if traffic allocation is by revision.

tag str

Indicates a string to be part of the URI to exclusively reference this target.

type str

The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

uri str

(Output) Displays the target URI.

percent Number

Specifies percent of the traffic to this Revision. This defaults to zero if unspecified.

revision String

The unique name for the revision. If this field is omitted, it will be automatically generated based on the Service name.

(Optional) Revision to which to send this portion of traffic, if traffic allocation is by revision.

tag String

Indicates a string to be part of the URI to exclusively reference this target.

type String

The allocation type for this traffic target. Possible values are: TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST, TRAFFIC_TARGET_ALLOCATION_TYPE_REVISION.

uri String

(Output) Displays the target URI.

Import

Service can be imported using any of these accepted formats

 $ pulumi import gcp:cloudrunv2/service:Service default projects/{{project}}/locations/{{location}}/services/{{name}}

 $ pulumi import gcp:cloudrunv2/service:Service default {{project}}/{{location}}/{{name}}

 $ pulumi import gcp:cloudrunv2/service:Service default {{location}}/{{name}}

Package Details

Repository: Google Cloud (GCP) Classic pulumi/pulumi-gcp
License: Apache-2.0
Notes: This Pulumi package is based on the google-beta Terraform Provider.

Google Cloud Classic v6.67.0 published on Wednesday, Sep 27, 2023 by Pulumi

pulumi/pulumi-gcp

gcp.cloudrunv2.Service

On this page

On this page

Example Usage

Cloudrunv2 Service Basic

Cloudrunv2 Service Sql

Cloudrunv2 Service Vpcaccess

Cloudrunv2 Service Directvpc

Cloudrunv2 Service Probes

Cloudrunv2 Service Secret

Cloudrunv2 Service Multicontainer

Create Service Resource

Service Resource Properties

Inputs

Outputs

Look up Existing Service Resource

Supporting Types

ServiceBinaryAuthorization, ServiceBinaryAuthorizationArgs

ServiceCondition, ServiceConditionArgs

ServiceTemplate, ServiceTemplateArgs

ServiceTemplateContainer, ServiceTemplateContainerArgs

ServiceTemplateContainerEnv, ServiceTemplateContainerEnvArgs

ServiceTemplateContainerEnvValueSource, ServiceTemplateContainerEnvValueSourceArgs

ServiceTemplateContainerEnvValueSourceSecretKeyRef, ServiceTemplateContainerEnvValueSourceSecretKeyRefArgs

ServiceTemplateContainerLivenessProbe, ServiceTemplateContainerLivenessProbeArgs

ServiceTemplateContainerLivenessProbeGrpc, ServiceTemplateContainerLivenessProbeGrpcArgs

ServiceTemplateContainerLivenessProbeHttpGet, ServiceTemplateContainerLivenessProbeHttpGetArgs

ServiceTemplateContainerLivenessProbeHttpGetHttpHeader, ServiceTemplateContainerLivenessProbeHttpGetHttpHeaderArgs

ServiceTemplateContainerLivenessProbeTcpSocket, ServiceTemplateContainerLivenessProbeTcpSocketArgs

ServiceTemplateContainerPort, ServiceTemplateContainerPortArgs

ServiceTemplateContainerResources, ServiceTemplateContainerResourcesArgs

ServiceTemplateContainerStartupProbe, ServiceTemplateContainerStartupProbeArgs

ServiceTemplateContainerStartupProbeGrpc, ServiceTemplateContainerStartupProbeGrpcArgs

ServiceTemplateContainerStartupProbeHttpGet, ServiceTemplateContainerStartupProbeHttpGetArgs

ServiceTemplateContainerStartupProbeHttpGetHttpHeader, ServiceTemplateContainerStartupProbeHttpGetHttpHeaderArgs

ServiceTemplateContainerStartupProbeTcpSocket, ServiceTemplateContainerStartupProbeTcpSocketArgs

ServiceTemplateContainerVolumeMount, ServiceTemplateContainerVolumeMountArgs

ServiceTemplateScaling, ServiceTemplateScalingArgs

ServiceTemplateVolume, ServiceTemplateVolumeArgs

ServiceTemplateVolumeCloudSqlInstance, ServiceTemplateVolumeCloudSqlInstanceArgs

ServiceTemplateVolumeEmptyDir, ServiceTemplateVolumeEmptyDirArgs

ServiceTemplateVolumeSecret, ServiceTemplateVolumeSecretArgs

ServiceTemplateVolumeSecretItem, ServiceTemplateVolumeSecretItemArgs

ServiceTemplateVpcAccess, ServiceTemplateVpcAccessArgs

ServiceTemplateVpcAccessNetworkInterface, ServiceTemplateVpcAccessNetworkInterfaceArgs

ServiceTerminalCondition, ServiceTerminalConditionArgs

ServiceTraffic, ServiceTrafficArgs

ServiceTrafficStatus, ServiceTrafficStatusArgs

Import

Package Details

On this page

On this page