net.lb.apply ​
Provider-neutral load balancer apply; fronts a Cloud Run service or instance/ip targets and routes paths across AWS ELBv2 or GCP HTTPS LB.
Provider-neutral load balancer apply DAG fanning out to AWS ELBv2 or GCP HTTPS LB.
Overview ​
| Property | Value |
|---|---|
| Workflow type | Dag |
| Library | App-deployments |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
workflow_run_id | string | No | — | Engine-stamped DAG step run ID. |
organization_uuid | uuid | Yes | — | Organization UUID (context-sourced). |
connection_uuid | uuid | Yes | — | Cloud connection (aws or gcp). |
backend | string | Yes | — | aws |
name | string | Yes | — | Logical LB name; sub-resources derive suffixed names. |
scope | string | No | — | regional |
scheme | string | No | — | internet-facing |
listeners | list | Yes | — | [{port,protocol,tls,routes:[{path_prefix,target}]}] |
targets | list | Yes | — | [{name,kind:cloud_run |
region | string | No | — | Region for regional resources / serverless NEG. |
managed_cert_domains | list | No | — | (gcp) Domains to provision a Google-managed compute sslCertificate for. When set, a create_ssl_certificate step runs and the target HTTPS proxy binds the created cert self-link instead of listeners[0].tls. Cert goes ACTIVE only after DNS points at the LB IP (~15-60min). |
dry_run | boolean | No | — | Plan only; do not mutate provider state. |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
workflow_run_id | string | No | — | Engine-stamped DAG step run ID. |
load_balancer_ref | string | No | — | ARN (aws) or self-link (gcp). |
endpoint | string | No | — | DNS name (aws) or serving IP (gcp). |
status | string | No | — | Apply status. |
resource_refs | json | No | — | Map of created sub-resource self-links/ARNs. |
create_neg | json | No | — | Result of the create_neg DAG step. |
create_backend_bucket | json | No | — | Result of the create_backend_bucket DAG step (static origin). |
create_ssl_certificate | json | No | — | Result of the create_ssl_certificate DAG step (Google-managed compute sslCertificate). |
create_backend_service | json | No | — | Result of the create_backend_service DAG step. |
upsert_url_map | json | No | — | Result of the upsert_url_map DAG step. |
create_https_proxy | json | No | — | Result of the create_https_proxy DAG step. |
create_forwarding_rule | json | No | — | Result of the create_forwarding_rule DAG step. |
create_lb | json | No | — | Result of the create_lb DAG step. |
create_tg | json | No | — | Result of the create_tg DAG step. |
create_listener | json | No | — | Result of the create_listener DAG step. |
register_targets | json | No | — | Result of the register_targets DAG step. |
wait_healthy | json | No | — | Result of the wait_healthy DAG step. |
failure_reason | string | No | — | Engine failure reason. |
failure_type | string | No | — | — |
failed_action | string | No | — | — |
failed_step | json | No | — | Failed DAG step envelope. |
failed_layer | json | No | — | Failed DAG layer envelope. |
failed_at_state | string | No | — | State where failure occurred. |
error | string | No | — | Error message. |
error_type | string | No | — | Error class. |
DAG Layers ​
| # | Layer | Steps | Compensation |
|---|---|---|---|
| 1 | gcp_backends | gcp.compute.serverless_neg.create, gcp.compute.backend_bucket.create, gcp.compute.ssl_certificate.ensure | — |
| 2 | gcp_backend_service | gcp.compute.backend_service.create | — |
| 3 | gcp_url_map | gcp.compute.url_map.upsert | — |
| 4 | gcp_proxy | gcp.compute.target_https_proxy.create | — |
| 5 | gcp_forwarding | gcp.compute.forwarding_rule.create | — |
| 6 | aws_stack | aws.elbv2.create_load_balancer, aws.elbv2.create_target_group, aws.elbv2.create_listener, aws.elbv2.register_targets, aws.elbv2.wait_targets_healthy | — |
Execution Flow ​
Sub-workflows ​
| Sub-workflow | Step name |
|---|---|
gcp.compute.serverless_neg.create | create_neg |
gcp.compute.backend_bucket.create | create_backend_bucket |
gcp.compute.ssl_certificate.ensure | create_ssl_certificate |
gcp.compute.backend_service.create | create_backend_service |
gcp.compute.url_map.upsert | upsert_url_map |
gcp.compute.target_https_proxy.create | create_https_proxy |
gcp.compute.forwarding_rule.create | create_forwarding_rule |
aws.elbv2.create_load_balancer | create_lb |
aws.elbv2.create_target_group | create_tg |
aws.elbv2.create_listener | create_listener |
aws.elbv2.register_targets | register_targets |
aws.elbv2.wait_targets_healthy | wait_healthy |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "net.lb.apply",
"initial_data": {
"organization_uuid": "value",
"connection_uuid": "value",
"backend": "value",
"name": "value"
}
}