Cloud Run Function (gen2)

Name: Cloud Run Function (gen2)
Brand: IaC Bazaar
SKU: gcp-cloud-function
Price: 179.00 USD
Availability: InStock

Event-driven or HTTP gen2 function with source upload, dedicated runtime SA and Eventarc trigger wiring.

terraformGoogle Cloud#gcp

Compare Serverless Functions across clouds →

gcp-cloud-functionterraform v1.7

Verification

Live-tested

Really deployed to a cloud sandbox, verified against its outputs and assertions, then destroyed - with the teardown confirmed.

Conformance

Static validation (fmt · validate · tflint)
Security scan clean (Checkov)
Plan tests (mocked: validation rules · outputs)

Provenance

SHA-256 checksum
Cosign signature

Functional

Live-tested - applied, verified, destroyed

Last verified 2026-08-03 · how we verify

Verify this download

cosign · sha-256

Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.

# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub

# 2. This module's Sigstore bundle
curl -o gcp-cloud-function-1.0.0.sigstore.json \
  https://www.iac-bazaar.com/api/artifacts/gcp-cloud-function/signature

# 3. Verify the tarball you downloaded
cosign verify-blob \
  --key cosign.pub \
  --bundle gcp-cloud-function-1.0.0.sigstore.json \
  gcp-cloud-function-1.0.0.tar.gz
# → Verified OK

# 4. (optional) confirm the checksum too
echo "6a1bd6452e6e732fa6e09915944c570372ebe5ef559a8f9c0bbf279a08005fa3  gcp-cloud-function-1.0.0.tar.gz" | sha256sum -c

Signature bundle Public key Machine-readable receipt How we verify

Use it from the registry

terraform · opentofu

module "cloud_function" {
  source  = "www.iac-bazaar.com/iac-bazaar/gcp-cloud-function/gcp"
  version = "1.0.0"
}

Paid module — needs a purchase (or a subscription that covers it) plus a registry token from /account/tokens. Full setup: registry docs.

Inputs & outputs

Create a free account to read this module's contract

The declared contract — every input name, type, default and description, plus every output — is shown to signed-in accounts, not to anonymous visitors.

A free account sees the contract of every Free module. This one is Premium, so its contract unlocks when you buy it.

Create a free account →Sign in

Documentation

gcp-cloud-function

A Cloud Run function (gen2) — HTTP or event-driven — with the source zip uploaded to GCS, a dedicated runtime service account, least-privilege Secret Manager grants wired automatically, optional Eventarc trigger, VPC egress, and private invoker IAM. One module call gives you a production function whose identity is not the default compute service account and whose HTTP surface is locked down unless you explicitly open it. Works with Terraform and OpenTofu (>= 1.6), Google provider >= 7.0, < 8.0.

Status: static-validated, live-test pending. Validated with tofu validate + tflint + checkov against the hashicorp/google provider. Not yet applied against a live GCP project (no cloud sandbox), so it ships under live-test quarantine.

Design & secure defaults

Dedicated runtime service account (<name>-fn) — never the default compute SA. Supply your own with create_service_account = false.
Private by default: no invoker IAM unless you list invoker_members; allUsers only via the explicit allow_unauthenticated = true opt-in.
Least-privilege secrets: roles/secretmanager.secretAccessor is granted per referenced secret, not project-wide. Cross-project secrets are left for you to grant where they live.
Content-addressed source: the uploaded object name defaults to <name>/<md5>.zip, so a changed zip forces a fresh build.
Cost cap: max_instance_count = 10 by default; gen2 request concurrency starts at 1 (raise deliberately).
VPC egress via a Serverless VPC Access connector, PRIVATE_RANGES_ONLY by default.

Requirements

Requirement	Version
Terraform / OpenTofu	`>= 1.6`
`hashicorp/google`	`>= 7.0, < 8.0`

License

Commercial — LicenseRef-IaCBazaar-Commercial. See the IaC Bazaar terms.

Usage code & full reference unlock after purchase

The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.

Usage
Inputs
Outputs

Related modules

Google Cloud✓ live-tested

Cloud Run Job (v2)

A Cloud Run v2 Job for batch and run-to-completion workloads with a dedicated runtime service account, auto-wired Secret Manager accessor grants, VPC egress, bounded retries and per-task timeout.

$179.00v1.0.0

Google Cloud✓ live-tested

Cloud Run Service

Cloud Run v2 service with autoscaling, secret and VPC egress wiring, custom domain and invoker IAM done right.

$179.00v1.0.0

Azure✓ live-tested

Azure Functions App

Function app (Flex Consumption or Premium) with storage, Application Insights, managed identity and VNet integration.

$179.00v1.0.0

CloudflareEdge & DNS

Cloudflare Workers Platform

Worker with KV/R2/D1 bindings, routes, custom domain, and secrets - full edge app scaffold.

$179.00v1.0.0

Oracle CloudOracle Cloud

Functions Application

Serverless Fn application with functions, provisioned concurrency, invoke logging and Events-rule trigger wiring.

$179.00v1.0.0

AWS✓ live-tested

Lambda Function (Packaged & Wired)

Lambda with execution role, log group, triggers, aliases, and zip/container packaging handled.

$179.00v1.0.0