| yc-sa-json-credentials | JSON containing authorized key for Service Account. Either this or `yc-iam-token` or `yc-sa-id` should be provided. More info https://cloud.yandex.ru/docs/container-registry/operations/authentication#sa-json | no | — |
| yc-iam-token | IAM token for Yandex Cloud. Either this or `yc-sa-json-credentials` or `yc-sa-id` should be provided. More info https://yandex.cloud/ru/docs/iam/concepts/authorization/iam-token | no | — |
| yc-sa-id | Service Account ID. Will be uses to exchange GitHub token to Yandex Cloud token. Either this or `yc-iam-token` or `yc-sa-json-credentials` should be provided. More info https://yandex.cloud/ru/docs/iam/concepts/workload-identity | no | — |
| container-name | Container name | yes | — |
| folder-id | Folder ID | yes | — |
| public | Make container publicly available. Any user will be able to invoke a container without providing the authorization header | no | — |
| revision-service-account-id | Id of service account that will be used to pull images to be deployed. Can be omitted if container registry has public access | no | — |
| revision-cores | Number of Cores | no | 1 |
| revision-memory | Memory. Format: `\\d(Mb|Gb)`. E.g. 128Mb | no | 128Mb |
| revision-core-fraction | Core fraction | no | 100 |
| revision-concurrency | Number of concurrently handled requests. 1-16 | no | 1 |
| revision-image-url | Url of the docker image | yes | — |
| revision-execution-timeout | Request execution timeout in seconds | no | 3 |
| revision-working-dir | Working directory inside container | no | — |
| revision-commands | Command | no | — |
| revision-args | Arguments | no | — |
| revision-env | Environment variables. Multiline. Format: VARIABLE=value | no | — |
| revision-runtime | Revision runtime. Possible values: "http", "task" | no | http |
| revision-secrets | Lockbox secrets. Pattern: "<environmentVariable>=<secretId>/<versionId>/<secretKey>". Multiline | no | "" |
| revision-provisioned | Minimum count of provisioned instances | no | — |
| revision-zone-instances-limit | Upper limit for instance count in each availability zone. 0 means no limit | no | — |
| revision-zone-requests-limit | Upper limit of concurrent requests count in each availability zone. 0 means no limit | no | — |
| revision-network-id | Network id that will be attached to revision | no | — |
| revision-log-options-disabled | Is logging from container disabled. Possible values: "true", "false" | no | false |
| revision-log-options-log-group-id | Log group ID | no | — |
| revision-log-options-folder-id | Folder ID | no | — |
| revision-log-options-min-level | Minimum log entry level. (level_unspecified, trace, debug, info, warn, error, fatal) | no | level_unspecified |
| revision-storage-mounts | Storage mounts. Pattern: "S3_PATH:MOUNT_PATH:ACCESS_MODE" or "S3_PATH:MOUNT_PATH". Multiline. S3_PATH Pattern: "bucketId/bucketFolder" or "bucketId". bucketFolder can be empty to mount all bucket. ACCESS_MODE is optional parameter. Possible values: "read-only", "ro", "readOnly", "read_only", "ReadOnly", "read-write", "rw", "readWrite", "read_write", "ReadWrite". Default value - "read-only" | no | — |
| revision-ephemeral-mounts | Ephemeral disk mounts. Pattern: "MOUNT_PATH:SIZE[:ACCESS_MODE]". Multiline. SIZE format matches memory input, e.g. 512Mb or 5Gb. ACCESS_MODE is optional and mirrors storage mounts; default is read-write. Example: "/app/tmp:5Gb:rw" | no | — |