GenerateUploadUrlRequest(mapping=None, *, ignore_unknown_fields=False, **kwargs)Request of GenerateSourceUploadUrl method.
Attributes | |
|---|---|
| Name | Description |
parent |
str
The project and location in which the Google Cloud Storage signed URL should be generated, specified in the format projects/*/locations/*.
|
kms_key_name |
str
Resource name of a KMS crypto key (managed by the user) used to encrypt/decrypt function source code objects in staging Cloud Storage buckets. When you generate an upload url and upload your source code, it gets copied to a staging Cloud Storage bucket in an internal regional project. The source code is then copied to a versioned directory in the sources bucket in the consumer project during the function deployment. It must match the pattern projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}.
The Google Cloud Functions service account
(service-{project_number}@gcf-admin-robot.iam.gserviceaccount.com)
must be granted the role 'Cloud KMS CryptoKey
Encrypter/Decrypter
(roles/cloudkms.cryptoKeyEncrypterDecrypter)' on the
Key/KeyRing/Project/Organization (least access preferred).
GCF will delegate access to the Google Storage service
account in the internal project.
|