diff --git a/modules/v2/main.tf b/modules/v2/main.tf index d2c8f42d..74b435e3 100644 --- a/modules/v2/main.tf +++ b/modules/v2/main.tf @@ -97,6 +97,7 @@ resource "google_cloud_run_v2_service" "main" { labels = var.service_labels deletion_protection = var.cloud_run_deletion_protection + invoker_iam_disabled = var.invoker_iam_disabled template { revision = var.revision diff --git a/modules/v2/variables.tf b/modules/v2/variables.tf index 059453df..955a9f43 100644 --- a/modules/v2/variables.tf +++ b/modules/v2/variables.tf @@ -130,6 +130,12 @@ variable "members" { default = [] } +variable "invoker_iam_disabled" { + type = bool + default = false + description = "Disables IAM permission check for run.routes.invoke for callers of this service. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check. See https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/cloud_run_v2_service#invoker_iam_disabled-1" +} + variable "vpc_access" { type = object({ connector = optional(string)