This message was deleted.

This is what I do in TypeScript:

new gcp.cloudrun.IamBinding('idp-api-service-iam-binding', {
  location: gcpConfig.require('region'),
  service: idpApiCloudRunService.name,
  role: 'roles/run.invoker',
  members: ['allUsers'],
});

Adding that binding will ensure the CloudRun service allows unauthenticated user access.

Yeah -- I'm trying the go version of that now. But that is using the cloudrun package not the cloudrunv2 package

We got this to work for cloudrunv2 (TypeScript)

// Create an IAM member to allow the service to be publicly accessible.
const apiNestInvoker = new gcp.cloudrunv2.ServiceIamBinding(
  'api-server-invoker',
  {
    role: 'roles/run.invoker',
    members: ['allUsers'],
    name: apiServerService.name,
    location: gcpRegion,
    project: projectNameAndId,
  },
);

I tried that before I used the cloudrun package. It doesn't even compile as the args don't have a name property