CloudRunのサービスアカウント変更

[Shion1305]

CloudRun専用アカウントでの動作に変更

[github-actions]

Plan Result

CI link

Plan: 0 to add, 1 to change, 0 to destroy.

• Update
  • google_cloud_run_v2_service.release

Change Result (Click me)

  # google_cloud_run_v2_service.release will be updated in-place
  ~ resource "google_cloud_run_v2_service" "release" {
        id                      = "projects/lumos-profile-management/locations/asia-northeast1/services/release"
        name                    = "release"
        # (30 unchanged attributes hidden)

      ~ template {
          ~ service_account                  = "938038185918-compute@developer.gserviceaccount.com" -> "cloudrun-svc@lumos-profile-management.iam.gserviceaccount.com"
            # (8 unchanged attributes hidden)

            # (2 unchanged blocks hidden)
        }

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[github-actions]

❌ Apply Failed

CI link

It failed to parse the result.

Details (Click me)

Acquiring state lock. This may take a few moments...
data.google_secret_manager_secret.discord_callback_uri: Reading...
data.google_secret_manager_secret.discord_bot_token: Reading...
data.google_secret_manager_secret.jwt_secret: Reading...
data.google_secret_manager_secret.discord_auth_url: Reading...
data.google_secret_manager_secret.discord_member_role_id: Reading...
data.google_secret_manager_secret.line_client_secret: Reading...
data.google_secret_manager_secret.discord_client_secret: Reading...
data.google_secret_manager_secret.discord_client_id: Reading...
data.google_secret_manager_secret.line_callback_uri: Reading...
google_artifact_registry_repository.main-repo: Refreshing state... [id=projects/lumos-profile-management/locations/asia-northeast1/repositories/main]
data.google_secret_manager_secret.discord_auth_url: Read complete after 0s [id=projects/lumos-profile-management/secrets/DISCORD_AUTH_URL]
data.google_secret_manager_secret.line_client_id: Reading...
data.google_secret_manager_secret.discord_callback_uri: Read complete after 0s [id=projects/lumos-profile-management/secrets/DISCORD_CALLBACK_URI]
data.google_secret_manager_secret.line_auth_url: Reading...
data.google_secret_manager_secret.jwt_secret: Read complete after 0s [id=projects/lumos-profile-management/secrets/JWT_SECRET]
data.google_secret_manager_secret.discord_guild_id: Reading...
data.google_secret_manager_secret.discord_bot_token: Read complete after 0s [id=projects/lumos-profile-management/secrets/DISCORD_BOT_TOKEN]
data.google_secret_manager_secret.line_client_secret: Read complete after 0s [id=projects/lumos-profile-management/secrets/LINE_CLIENT_SECRET]
data.google_secret_manager_secret.discord_client_secret: Read complete after 0s [id=projects/lumos-profile-management/secrets/DISCORD_CLIENT_SECRET]
data.google_secret_manager_secret.firebase_admin_cert_path: Reading...
data.google_secret_manager_secret.discord_member_role_id: Read complete after 0s [id=projects/lumos-profile-management/secrets/DISCORD_MEMBER_ROLE_ID]
data.google_secret_manager_secret.discord_client_id: Read complete after 0s [id=projects/lumos-profile-management/secrets/DISCORD_CLIENT_ID]
data.google_secret_manager_secret.line_callback_uri: Read complete after 0s [id=projects/lumos-profile-management/secrets/LINE_CALLBACK_URI]
data.google_secret_manager_secret.line_client_id: Read complete after 0s [id=projects/lumos-profile-management/secrets/LINE_CLIENT_ID]
data.google_secret_manager_secret.firebase_admin_cert_path: Read complete after 0s [id=projects/lumos-profile-management/secrets/FIREBASE_ADMIN_CERT_PATH]
data.google_secret_manager_secret.discord_guild_id: Read complete after 0s [id=projects/lumos-profile-management/secrets/DISCORD_GUILD_ID]
data.google_secret_manager_secret.line_auth_url: Read complete after 0s [id=projects/lumos-profile-management/secrets/LINE_AUTH_URL]
google_cloud_run_v2_service.release: Refreshing state... [id=projects/lumos-profile-management/locations/asia-northeast1/services/release]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # google_cloud_run_v2_service.release will be updated in-place
  ~ resource "google_cloud_run_v2_service" "release" {
        id                      = "projects/lumos-profile-management/locations/asia-northeast1/services/release"
        name                    = "release"
        # (30 unchanged attributes hidden)

      ~ template {
          ~ service_account                  = "938038185918-compute@developer.gserviceaccount.com" -> "cloudrun-svc@lumos-profile-management.iam.gserviceaccount.com"
            # (8 unchanged attributes hidden)

            # (2 unchanged blocks hidden)
        }

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.
google_cloud_run_v2_service.release: Modifying... [id=projects/lumos-profile-management/locations/asia-northeast1/services/release]
google_cloud_run_v2_service.release: Still modifying... [id=projects/lumos-profile-management/locations/asia-northeast1/services/release, 10s elapsed]
╷
│ Error: Error waiting for Updating Service: Error code 13, message: Revision 'release-00025-98z' is not ready and cannot serve traffic. spec.template.spec.containers[0].env[3].value_from.secret_key_ref.name: Secret projects/938038185918/secrets/DISCORD_CLIENT_ID/versions/latest was not found
│ spec.template.spec.containers[0].env[7].value_from.secret_key_ref.name: Secret projects/938038185918/secrets/FIREBASE_ADMIN_CERT_PATH/versions/latest was not found
│ 
│   with google_cloud_run_v2_service.release,
│   on cloud-run.tf line 1, in resource "google_cloud_run_v2_service" "release":
│    1: resource "google_cloud_run_v2_service" "release" {
│ 
╵