mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-10-19 08:03:16 +00:00
8e508ea01a
* feat: support application default credentials for gcp pub/sub triggers Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: address review findings on gcp application default credentials Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: address review nits on gcp application default credentials Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: key the gcp credential-mode permission off the loaded mode Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: gate enabling an ADC gcp trigger on workspace admin Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: lock the gcp trigger row while authorizing a mode change Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: skip admin-only gcp listing when the caller cannot use those credentials Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * chore: update ee-repo-ref to 54bf630681000c8ed87a7067e357118e015123b1 This commit updates the EE repository reference after PR #738 was merged in windmill-ee-private. Previous ee-repo-ref: 91d0e228a0ad226625278b400c64f96a61404a10 New ee-repo-ref: 54bf630681000c8ed87a7067e357118e015123b1 Automated by sync-ee-ref workflow. --------- Co-authored-by: Claude Opus 5 <noreply@anthropic.com> Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com> Co-authored-by: Ruben Fiszel <ruben@windmill.dev>
124 lines
3.9 KiB
YAML
124 lines
3.9 KiB
YAML
type: object
|
|
properties:
|
|
script_path:
|
|
type: string
|
|
description: Path to the script or flow to execute when triggered
|
|
is_flow:
|
|
type: boolean
|
|
description: True if script_path points to a flow, false if it points to a script
|
|
labels:
|
|
type: array
|
|
items:
|
|
type: string
|
|
draft_only:
|
|
type: boolean
|
|
description: 'True when this row is a per-user draft with no deployed
|
|
|
|
trigger at the same path. Set by list endpoints when
|
|
|
|
`include_draft_only=true` synthesizes the row from the
|
|
|
|
draft. Frontend renders a "Draft" badge.
|
|
|
|
'
|
|
is_draft:
|
|
type: boolean
|
|
description: 'True when the authed user has a per-user draft at this path
|
|
|
|
(over a deployed row or a synthesized draft-only row).
|
|
|
|
Frontend appends a `*` to the displayed name.
|
|
|
|
'
|
|
gcp_resource_path:
|
|
type: string
|
|
description: Path to the GCP resource containing service account credentials for
|
|
authentication. Omit to authenticate with the instance's application default
|
|
credentials.
|
|
project_id:
|
|
type: string
|
|
description: GCP project the client operates in. Defaults to the project of the
|
|
credentials. Topics and subscriptions given as fully qualified names are reached
|
|
whatever it is.
|
|
topic_id:
|
|
type: string
|
|
description: Google Cloud Pub/Sub topic ID to subscribe to. Accepts a bare ID
|
|
or a fully qualified name (projects/<project>/topics/<id>).
|
|
subscription_id:
|
|
type: string
|
|
description: Google Cloud Pub/Sub subscription ID. Accepts a bare ID or a fully
|
|
qualified name (projects/<project>/subscriptions/<id>).
|
|
delivery_type:
|
|
type: string
|
|
enum:
|
|
- push
|
|
- pull
|
|
description: Delivery mode for messages. 'push' for HTTP push delivery where messages
|
|
are sent to a webhook endpoint, 'pull' for polling where the trigger actively
|
|
fetches messages.
|
|
delivery_config:
|
|
type: object
|
|
properties:
|
|
audience:
|
|
type: string
|
|
description: The audience claim for OIDC tokens used in push authentication.
|
|
authenticate:
|
|
type: boolean
|
|
description: If true, push messages will include OIDC authentication tokens.
|
|
description: Configuration for push delivery mode.
|
|
subscription_mode:
|
|
type: string
|
|
enum:
|
|
- existing
|
|
- create_update
|
|
description: The mode of subscription. 'existing' means using an existing GCP
|
|
subscription, while 'create_update' involves creating or updating a new subscription.
|
|
error_handler_path:
|
|
type: string
|
|
description: Path to a script or flow to run when the triggered job fails.
|
|
error_handler_args:
|
|
type: object
|
|
description: The arguments to pass to the script or flow
|
|
retry:
|
|
type: object
|
|
properties:
|
|
constant:
|
|
type: object
|
|
description: Retry with constant delay between attempts
|
|
properties:
|
|
attempts:
|
|
type: integer
|
|
description: Number of retry attempts
|
|
seconds:
|
|
type: integer
|
|
description: Seconds to wait between retries
|
|
exponential:
|
|
type: object
|
|
description: Retry with exponential backoff (delay doubles each time)
|
|
properties:
|
|
attempts:
|
|
type: integer
|
|
description: Number of retry attempts
|
|
multiplier:
|
|
type: integer
|
|
description: Multiplier for exponential backoff
|
|
seconds:
|
|
type: integer
|
|
minimum: 1
|
|
description: Initial delay in seconds
|
|
random_factor:
|
|
type: integer
|
|
minimum: 0
|
|
maximum: 100
|
|
description: Random jitter percentage (0-100) to avoid thundering herd
|
|
retry_if:
|
|
$ref: '#/components/schemas/RetryIf'
|
|
description: Retry configuration for failed module executions
|
|
required:
|
|
- script_path
|
|
- is_flow
|
|
- topic_id
|
|
- subscription_id
|
|
- delivery_type
|
|
- subscription_mode
|