gcp.run.service.set-iam-policy ​
Set or merge IAM bindings on a Cloud Run service.
Overview ​
| Property | Value |
|---|---|
| Workflow type | Linear |
| Library | Base-gcp |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
connection_uuid | uuid | Yes | — | GCP CloudConnection UUID. |
project_id | string | No | — | GCP project override. |
region | string | Yes | — | Cloud Run region. |
service_name | string | Yes | — | Cloud Run service id. |
bindings | json | Yes | — | IAM bindings to apply. |
mode | string | No | — | merge or replace; defaults to merge. |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
connection_uuid | uuid | No | — | Echoed connection UUID. |
project_id | string | No | — | Effective project. |
region | string | No | — | Cloud Run region. |
service_name | string | No | — | Cloud Run service id. |
bindings | json | No | — | Applied IAM bindings. |
mode | string | No | — | Echoed apply mode (merge |
etag | string | No | — | Resulting policy etag. |
policy | json | No | — | Sanitized IAM policy. |
failure_reason | string | No | — | Human-readable failure reason. |
failed_step | string | No | — | Failed logical step. |
failed_layer | json | No | — | Engine failed layer. |
failed_at_state | string | No | — | State where failure occurred. |
error | string | No | — | Error message. |
error_type | string | No | — | Error class. |
States ​
| State | Initial | Terminal | Success | Auto-advance | Description |
|---|---|---|---|---|---|
pending | Yes | No | — | execute | — |
applying | No | No | — | complete | — |
completed | No | Yes | Yes | — | — |
failed | No | Yes | No | — | — |
State Diagram ​
Transitions ​
| From | Action | To | Description |
|---|---|---|---|
pending | execute | applying | — |
applying | complete | completed | — |
* (any state) | fail | failed | — |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "gcp.run.service.set-iam-policy",
"initial_data": {
"connection_uuid": "value",
"region": "value",
"service_name": "value",
"bindings": "value"
}
}