| project_id | ID of the Google Cloud project in which to deploy the service. The default
value is computed from the environment. | no | — |
| region | Region in which the function should be deployed. | no | us-central1 |
| universe | The Google Cloud universe to use for constructing API endpoints. Trusted
Partner Cloud and Google Distributed Hosted Cloud should set this to their
universe address.
You can also override individual API endpoints by setting the environment
variable `GHA_ENDPOINT_OVERRIDE_<endpoint>` where `<endpoint>` is the API
endpoint to override. For example:
```yaml
env:
GHA_ENDPOINT_OVERRIDE_oauth2: 'https://oauth2.myapi.endpoint/v1'
```
For more information about universes, see the Google Cloud documentation. | no | googleapis.com |
| name | Name of the Cloud Function. | yes | — |
| description | Human-friendly description of the Cloud Function. | no | — |
| environment | Runtime environment for the Cloud Function. Allowed values are "GEN_1" and
"GEN_2", but this GitHub Action only provides support for "GEN_2". | no | GEN_2 |
| kms_key_name | Resource name of a Google Cloud KMS crypto key used to encrypt/decrypt
function resources. If specified, you must also provide an artifact
registry repository using the 'docker_repository' field that was created
with the same key. | no | — |
| labels | List of labels that should be set on the function. These are
comma-separated or newline-separated `KEY=VALUE`. Keys or values that
contain separators must be escaped with a backslash (e.g. `\,` or `\\n`)
unless quoted. Any leading or trailing whitespace is trimmed unless values
are quoted.
```yaml
labels: |-
labela=my-label
labelb=my-other-label
```
This value will only be set if the input is a non-empty value. If a
non-empty value is given, the field values will be overwritten (not
merged). To remove all values, set the value to the literal string `{}`.
Google Cloud restricts the allowed values and length for labels. Please
see the Google Cloud documentation for labels for more information. | no | — |
| source_dir | Path on disk to the root of the the function's source code. Defaults to
current directory. This does NOT follow symlinks to directories or files
when generating the upload artifact.
**NOTE:** The function source code must exist on the GitHub Actions
filesystem. This means you must have `use: actions/checkout@v4` before the
deployment step!. | no | ./ |
| runtime | Runtime for the function, such as "nodejs20". For a list of all available
runtimes, run:
```sh
$ gcloud functions runtimes list
```
The available runtimes change over time. | yes | — |
| build_environment_variables | List of environment variables that should be set in the build environment.
These are comma-separated or newline-separated `KEY=VALUE`. Keys or values
that contain separators must be escaped with a backslash (e.g. `\,` or
`\\n`) unless quoted. Any leading or trailing whitespace is trimmed unless
values are quoted.
```yaml
build_environment_variables: |-
FRUIT=apple
SENTENCE=" this will retain leading and trailing spaces "
```
This value will only be set if the input is a non-empty value. If a
non-empty value is given, the field values will be overwritten (not
merged). To remove all values, set the value to the literal string `{}`.
Previous versions of this GitHub Action also included a separate input for
sourcing values from a value, but this is no longer supported. Use a
community action or script to read the file in a separate step and import
the contents as an output. | no | — |
| build_service_account | Service account to be used for building the container. | no | — |
| build_worker_pool | Name of the Cloud Build Custom Worker Pool that should be used to build
the function. The format of this field is:
projects/[PROJECT]/locations/[REGION]/workerPools/[WORKER_POOL]
where `[PROJECT]` and `[REGION]` are the project id and region
respectively where the worker pool is defined and `[WORKER_POOL]` is the
short name of the worker pool.
If the project ID is not the same as the function, then the Cloud
Functions Service Agent must be granted the role Cloud Build Custom
Workers Builder in the project. | no | — |
| docker_repository | Repository in Artifact Registry to which the function docker image will be
pushed after it is built by Cloud Build. If unspecified, Cloud Functions
will create and use a repository named 'gcf-artifacts' for every deployed
region.
The value must match the pattern:
projects/[PROJECT]/locations/[LOCATION]/repositories/[REPOSITORY].
Cross-project repositories are not supported. Cross-location repositories
are not supported. Repository format must be 'DOCKER'. | no | — |
| entry_point | Name of a Google Cloud Function (as defined in source code) that will be
executed. Defaults to the resource name suffix (ID of the function), if
not specified. | no | — |
| all_traffic_on_latest_revision | If true, the latest function revision will be served all traffic. | no | true |
| cpu | The number of available CPUs to set (e.g. 0.5, 2, 2000m). By default, a
new function's available CPUs is determined based on its memory value. | no | — |
| memory | The amount of memory available for the function to use. Allowed values are
of the format: <number><unit> with allowed units of "k", "M", "G", "Ki",
"Mi", "Gi" (e.g 128M, 10Mb, 1024Gi).
For all generations, the default value is 256MB of memory. | no | — |
| environment_variables | List of environment variables that should be set in the runtime
environment. These are comma-separated or newline-separated `KEY=VALUE`.
Keys or values that contain separators must be escaped with a backslash
(e.g. `\,` or `\\n`) unless quoted. Any leading or trailing whitespace is
trimmed unless values are quoted.
```yaml
environment_variables: |-
FRUIT=apple
SENTENCE=" this will retain leading and trailing spaces "
```
This value will only be set if the input is a non-empty value. If a
non-empty value is given, the field values will be overwritten (not
merged). To remove all values, set the value to the literal string `{}`.
Previous versions of this GitHub Action also included a separate input for
sourcing values from a value, but this is no longer supported. Use a
community action or script to read the file in a separate step and import
the contents as an output. | no | — |
| ingress_settings | Ingress settings controls what traffic can reach the function. Valid
values are "ALLOW_ALL", "ALLOW_INTERNAL_ONLY", and
"ALLOW_INTERNAL_AND_GCLB". | no | ALLOW_ALL |
| max_instance_count | Sets the maximum number of instances for the function. A function
execution that would exceed max-instances times out. | no | — |
| max_instance_request_concurrency | Sets the maximum number of concurrent requests allowed per container
instance. | no | — |
| min_instance_count | Sets the minimum number of instances for the function. This is helpful for
reducing cold start times. | no | — |
| secrets | List of KEY=VALUE pairs to use as secrets. These are comma-separated or
newline-separated `KEY=VALUE`. Keys or values that contain separators must
be escaped with a backslash (e.g. `\,` or `\\n`) unless quoted. Any
leading or trailing whitespace is trimmed unless values are quoted.
These can either be injected as environment variables or mounted as
volumes. Keys starting with a forward slash '/' are mount paths. All other
keys correspond to environment variables:
```yaml
with:
secrets: |-
# As an environment variable:
KEY1=projects/my-project/secrets/my-secret/versions/latest
# As a volume mount:
/secrets/api/key=projects/my-project/secrets/my-secret/versions/123
```
This value will only be set if the input is a non-empty value. If a
non-empty value is given, the field values will be overwritten (not
merged). To remove all values, set the value to the literal string `{}`. | no | — |
| service_account | The email address of the IAM service account associated with the Cloud Run
service for the function. The service account represents the identity of
the running function, and determines what permissions the function has. If
not provided, the function will use the project's default service account
for Compute Engine.
Note this differs from the service account used to deploy the Cloud
Function, which is the currently-authenticated principal. However, the
deploying service account must have permission to impersonate the runtime
service account, which can be achieved by granting the deployment service
account "roles/iam.serviceAccountUser" permission on the runtime service
account. | no | — |
| service_timeout | The function execution timeout, specified as a time duration (e.g. "30s"
for 30 seconds). | no | 60s |
| vpc_connector | ID of the connector or fully qualified identifier for the connector. | no | — |
| vpc_connector_egress_settings | Egress settings controls what traffic is diverted through the VPC Access
Connector resource. Allowed values are "PRIVATE_RANGES_ONLY" and
"ALL_TRAFFIC". | no | PRIVATE_RANGES_ONLY |
| event_trigger_location | The location of the trigger, which must be a region or multi-region where
the relevant events originate. | no | — |
| event_trigger_type | Specifies which action should trigger the function. For a list of
acceptable values, run:
```sh
$ gcloud functions event-types list
```
This usually requires the eventarc API to be enabled:
```sh
$ gcloud services enable eventarc.googleapis.com
```
The available trigger types may change over time. | no | — |
| event_trigger_filters | List of event filters that the trigger should monitor. An event that
matches all the filteres will trigger calls to the function. These are
comma-separated or newline-separated `ATTRIBUTE=VALUE`. Attributes or
values that contain separators must be escaped with a backslash (e.g. `\,`
or `\\n`) unless quoted. To treat a value as a path pattern, prefix the
value with the literal string `PATTERN:`. Any leading or trailing
whitespace is trimmed unless values are quoted.
```yaml
event_trigger_type: 'google.cloud.audit.log.v1.written'
event_trigger_filters: |-
serviceName=compute.googleapis.com
methodName=PATTERN:compute.instances.*
```
This value will only be set if the input is a non-empty value. If a
non-empty value is given, the field values will be overwritten (not
merged). To remove all values, set the value to the literal string `{}`.
For more information, see [Eventarc
Triggers](https://cloud.google.com/functions/docs/calling/eventarc) and
[Eventarc Path
Patterns](https://cloud.google.com/eventarc/docs/path-patterns). | — | — |
| event_trigger_pubsub_topic | Name of Google Cloud Pub/Sub topic. Every message published in this topic
will trigger function execution with message contents passed as input
data of the format:
projects/[PROJECT]/topics/[TOPIC]
The service account must have permissions on this topic. | no | — |
| event_trigger_service_account | The email address of the IAM service account associated with the Eventarc
trigger for the function. This is used for authenticated invocation. | no | — |
| event_trigger_retry | Describes whether event triggers should retry in case of function's
execution failure. | no | true |
| event_trigger_channel | The name of the channel associated with the trigger in the format:
projects/[PROJECT]/locations/[LOCATION]/channels/<channel>
You must provide a channel to receive events from Eventarc SaaS partners. | no | — |