gcp-eventarc-explicit-trigger-to-cloudrun
Live Eventarc trigger (state=ACTIVE) routes events to a Cloud Run service destination.
match (record)
{
"api": "eventarc.projects.locations.triggers.get",
"field": "destination.cloudRun"
}
where
trigger.state == ACTIVE
trigger.destination.cloudRun.service is set
emit
| source type | EventRule |
|---|---|
| target type | Compute |
| source | <Eventarc trigger node (EventRule)> |
| target | <Cloud Run service node (ContainerService)> |
| conditions | trigger_exists service_state |
Narrative
Eventarc trigger {trigger.name} (state=ACTIVE) delivers events to Cloud Run service {destination.cloudRun.service}.
Raw rule rules/explicit/gcp-eventarc.yaml
id: gcp-eventarc-explicit-trigger-to-cloudrun
emits: CanTrigger
description: Live Eventarc trigger (state=ACTIVE) routes events to a Cloud Run service destination.
match_record:
api: eventarc.projects.locations.triggers.get
field: destination.cloudRun
where:
- trigger.state == ACTIVE
- trigger.destination.cloudRun.service is set
emit:
source_type: EventRule
target_type: Compute
source: <Eventarc trigger node (EventRule)>
target: <Cloud Run service node (ContainerService)>
evidence_fields:
- trigger.name
- trigger.destination.cloudRun.service
- trigger.destination.cloudRun.region
- trigger.state
conditions:
- trigger_exists
- service_state
narrative: Eventarc trigger {trigger.name} (state=ACTIVE) delivers events to Cloud Run service {destination.cloudRun.service}.