Cloud Scheduler HTTP Cron Job

gcp-cloud-scheduler

A Cloud Scheduler cron job that calls an HTTP(S) endpoint on a schedule, with the retry and timeout controls hand-rolled jobs usually skip: a bounded attempt deadline, a capped exponential-backoff retry policy, and optional service-account auth (OIDC for Cloud Run / Cloud Functions / IAP, OAuth for Google APIs). Works with Terraform and OpenTofu (>= 1.6), Google provider >= 7.0, < 8.0.

Secure defaults:

• When an auth service account is supplied, the scheduler mints a short-lived OIDC/OAuth token per invocation — no static credential in the request.
• The attempt deadline and retry backoff are bounded, so a hung or flapping endpoint can't pin executions open or hammer a downstream forever.
• Cloud Scheduler in a supported region (e.g. us-central1) no longer needs an App Engine application.

Requirements

Requirement	Version
Terraform / OpenTofu	>= 1.6
hashicorp/google	>= 7.0, < 8.0

The Cloud Scheduler API (cloudscheduler.googleapis.com) must be enabled. The auth service account (if used) must be granted invoker permission on the target endpoint — that grant is target-scoped and stays outside this module.

Verification

Static-validated (fmt, validate, tflint). Live apply/destroy testing pending cloud sandbox availability — see catalog status.

License

Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).