string Code { get; }
Source
Gets the stable diagnostic code.
Represents the closed, non-secret schema that maps AppSurface logical deployment ids to externally provisioned GCP resources.
Environment
Project
Region
us-central1
.Jobs
CloudSqlInstanceConnectionName
project:region:instance
name.Network
ServiceAccounts
Secrets
Map keys are canonical lowercase AppSurface logical ids. Values are physical resource identifiers only; secret values and unknown properties are rejected by the profile loader.
Task<GcpCloudRunBindingProfile> LoadAsync(string path, string expectedEnvironment, CancellationToken cancellationToken = default)
Loads and strictly validates a profile without resolving any secret value.
path
/var
, /tmp
, and /etc
aliases.expectedEnvironment
cancellationToken
Task<GcpCloudRunBindingProfile> LoadAsync(string path, string expectedEnvironment, string trustedRoot, CancellationToken cancellationToken = default)
Loads a profile and rejects symbolic links in every path component beneath a trusted root.
path
expectedEnvironment
trustedRoot
cancellationToken
Externally provisioned Direct VPC binding.
Network
Subnetwork
Egress
Physical Secret Manager reference and explicit rotation mode.
SecretId
VersionMode
Compiles migration-job intent to GCP Cloud Run v2 artifacts and performs read-only deployed parity checks.
GcpCloudRunDeploymentTarget Create()
Creates the standard GCP Cloud Run deployment target.
Safe normalized Cloud Run migration-job configuration used for shadow and owned parity.
Executes one read-only gcloud invocation expressed as an argument array.
Task<GcloudCommandResult> RunAsync(IReadOnlyList<string> arguments, TimeSpan timeout, CancellationToken cancellationToken)
Runs gcloud with bounded time and cancellation.
Captured process result. Callers must not log raw output without provider sanitization.
ExitCode
StandardOutput
StandardError
Safe classified process-launch or timeout failure.
string Code { get; }
Source
Gets the stable diagnostic code.
string Problem { get; }
Source
Gets the safe problem.
string Cause { get; }
Source
Gets the safe cause.
string Fix { get; }
Source
Gets the remediation.
Production gcloud process runner. It launches the executable directly except on Windows, where the Cloud SDK's gcloud.cmd
launcher requires cmd.exe
; that path rejects whitespace and shell metacharacters before dispatch. The runner kills the process tree on timeout or cancellation.
ProcessStartInfo CreateStartInfo(IReadOnlyList<string> arguments)
Builds the non-shell or bounded Windows process-start contract without launching a process.
arguments
A fully configured process start description.
string BuildWindowsCommand(string command, IReadOnlyList<string> arguments)
Builds a metacharacter-free Windows command line for the fixed Cloud SDK launcher.
command
arguments
A command string safe for the bounded cmd.exe /d /c
dispatch path.
string Command { get; }
Source
Gets the selected gcloud command for platform-contract tests.
bool RequiresWindowsCommandInterpreter { get; }
Source
Gets whether the selected command requires the bounded Windows command-interpreter path.