You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Cloud Run is deployed in public mode (--allow-unauthenticated flag). This allows anybody the capability to trigger an export, and if it's done continuously, it can decrease Firestore performances and strongly increase the amount of data store in Cloud Storage.
I recommend to deploy the Cloud Run, in private mode (use --no-allow-unauthenticated flag) and to create a new service account for the Cloud Scheduler. Grant this service account with the role run.invoker on the Cloud Run service and deploy Cloud Scheduler with the service account.
(Only the file README.md will be impacted on this feature)
The text was updated successfully, but these errors were encountered:
The Cloud Run is deployed in public mode (
--allow-unauthenticated
flag). This allows anybody the capability to trigger an export, and if it's done continuously, it can decrease Firestore performances and strongly increase the amount of data store in Cloud Storage.I recommend to deploy the Cloud Run, in private mode (use
--no-allow-unauthenticated
flag) and to create a new service account for the Cloud Scheduler. Grant this service account with the rolerun.invoker
on the Cloud Run service and deploy Cloud Scheduler with the service account.(Only the file
README.md
will be impacted on this feature)The text was updated successfully, but these errors were encountered: