Add NEG support for cloud_run

cloud_run/main.tf

@@ -23,6 +23,21 @@ resource "google_cloud_run_service" "default" {
       containers {
         image = var.container.image
 
+        startup_probe {
+          failure_threshold     = 5
+          initial_delay_seconds = 10
+          timeout_seconds       = 3
+          period_seconds        = 3
+
+          http_get {
+            path = "/"
+            http_headers {
+              name  = "Access-Control-Allow-Origin"
+              value = "*"
+            }
+          }
+        }
+
         dynamic "env" {
           for_each = var.container.env
 
@@ -72,6 +87,20 @@ resource "google_cloud_run_domain_mapping" "default" {
   }
 }
 
+resource "google_compute_region_network_endpoint_group" "default" {
+  count = var.neg == null ? 0 : 1
+
+  name                  = "${google_cloud_run_service.default.name}-neg"
+  network_endpoint_type = "SERVERLESS"
+  project               = var.project_id
+  region                = google_cloud_run_service.default.location
+
+  cloud_run {
+    service = google_cloud_run_service.default.name
+    tag     = var.neg.tag
+  }
+}
+
 resource "google_cloud_run_service_iam_policy" "default" {
   count = length(var.invokers) > 0 ? 1 : 0
 

cloud_run/outputs.tf

@@ -3,6 +3,11 @@ output "name" {
   value       = google_cloud_run_service.default.name
 }
 
+output "neg" {
+  description = "NEG ID, if available."
+  value = var.neg == null ? null : google_compute_region_network_endpoint_group.default.id
+}
+
 output "public_url" {
   description = "Public IP of the Cloud Run service."
   value       = google_cloud_run_service.default.status[0].url

cloud_run/variables.tf

@@ -41,6 +41,15 @@ variable "name" {
   type        = string
 }
 
+variable "neg" {
+  default     = null
+  description = "If specified, creates a Network Endpoint Group (NEG) for the Cloud Run service with the contained attributes."
+  nullable    = true
+  type = object({
+    tag = optional(string)
+  })
+}
+
 variable "project_id" {
   description = "ID of project to create resources in."
   type        = string