feat: updating secure blueprint to cloud run v2 - #439
Open
marcelorobj wants to merge 13 commits into
Open
Conversation
marcelorobj
requested review from
a team,
anamer,
ayushmjain,
krprabhat-eng,
prabhu34 and
q2w
as code owners
January 29, 2026 13:20
Contributor
|
/gcbrun |
…ogle-cloud-run into update-bp-to-v2
…ogle-cloud-run into update-bp-to-v2
|
This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days |
Collaborator
Author
|
/gcbrun |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
This pull request updates the core blueprint/project to version 2 (v2). This update introduces the Cloud Run v2 API module as the core engine for deployments, bringing native support for advanced features like Direct VPC Egress, liveness/startup probes, and Gen2 execution environments to ensure our infrastructure aligns with the latest v2 specifications.
Specifically, the following changes were made:
secure-cloud-run-coremodule's source has been bumped to its v2 equivalent (source = "../v2"), transitioning the underlying infrastructure to use Google Cloud Run v2 Terraform resources.startup_probe,liveness_probe,execution_environment(defaults to Gen2),vpc_network_interface(for Direct VPC Egress),enable_prometheus_sidecar,iap_members, andcloud_run_deletion_protection.google_cloud_run_domain_mappingnatively into the v2 module and core modules, adding corresponding variables (verified_domain_name,certificate_mode,force_override) and outputs (domain_map_id,domain_map_status,service_url).google_vpc_access_connectorconditionally created (only created ifconnector_nameis provided), allowing for deployments that strictly use Direct VPC Egress without requiring a Serverless VPC Access Connector.requestsvariable from the core module. Updatedvpc_egress_valuedefaults and allowed values to use uppercase enums (PRIVATE_RANGES_ONLY,ALL_TRAFFIC) to comply with v2 API standards.traffic_splitwas also updated to utilize optional attributes.This change allows users to leverage the new v2 features while maintaining a secure and scalable environment.
Related Issues/PRs
Type of Change
Checklist
How Has This Been Tested?
This feature has been tested by deploying the updated v2 blueprint in a sandbox environment. Verification included:
Important Notes
vpc_egress_valuenow requires uppercase strings (e.g.,PRIVATE_RANGES_ONLYinstead ofprivate-ranges-only).vpc_connector_id) or utilizing Direct VPC Egress by providingvpc_network_interface.