Eventarc lets you securely route events from Google Cloud services and custom sources to destinations such as Cloud Run, Google Kubernetes Engine (GKE), Workflows, and internal HTTP endpoints in Virtual Private Cloud (VPC) networks. To manage this access, you grant specific Identity and Access Management (IAM) roles to the service accounts that receive events and invoke your target workloads.
-
Roles and permissions for an internal HTTP endpoint in a VPC network
Grant Identity and Access Management (IAM) roles to service accounts so that Eventarc can receive events from sources, and deliver the events to an internal HTTP endpoint in a Virtual Private Cloud (VPC) network.
-
Roles and permissions for Cloud Run
Grant Identity and Access Management (IAM) roles to service accounts so that Eventarc can receive events from sources, and deliver the events to a target Cloud Run service.
-
Roles and permissions for GKE
Grant Identity and Access Management (IAM) roles to service accounts so that Eventarc can receive events from sources, and deliver the events to a target Google Kubernetes Engine (GKE) destination (including the public endpoints of private and public services running in a GKE cluster).
-
Roles and permissions for Workflows
Grant Identity and Access Management (IAM) roles to service accounts so that Eventarc can receive events from sources, and deliver the events to a target workflow.
-
Roles and permissions for a cross-project service account
Grant Identity and Access Management (IAM) roles so that you can attach a service account in one project to an Eventarc trigger in another project.