我想通过 Deployment Manager 部署具有特定 IAM 策略的 Cloud Function。我的部署.yml:
resources:
- type: gcp-types/cloudfunctions-v1:projects.locations.functions
name: test-function
properties:
parent: projects/test-project/locations/europe-west3
function: test-function
entryPoint: functions.KotlinHelloWorld
timeout: 30s
availableMemoryMb: 256
runtime: java11
location: europe-west3
sourceArchiveUrl: gs://source-bucket/kotlin-function.zip
httpsTrigger:
url: https://europe-west3-test-project.cloudfunctions.net/test-function
environmentVariables:
BUCKET: function-results
RESULT_FILE: dates.txt
accessControl:
gcpIamPolicy:
bindings:
- role: roles/cloudfunctions.invoker
members:
- allUsers
Run Code Online (Sandbox Code Playgroud)
它无需访问控制块即可工作。但在上面的情况下我得到一个错误:
user@pc-003:~/Develop/kotlin-function$ gcloud deployment-manager deployments update learning --config deployment.yml
The fingerprint of the deployment is 6MAQlDoq73-O_QDwSCD7uA==
Waiting for update [operation-1593088111352-5a8e7baf9192b-7d149199-82e96170]...failed.
ERROR: (gcloud.deployment-manager.deployments.update) Error in Operation [operation-1593088111352-5a8e7baf9192b-7d149199-82e96170]: errors:
- code: …Run Code Online (Sandbox Code Playgroud) google-cloud-platform google-cloud-functions google-deployment-manager