Add support for service account in functions.runWith

Author: egor-miasnikov

spec/function-builder.spec.ts

@@ -238,4 +238,17 @@ describe('FunctionBuilder', () => {
  )}`
  );
  });
+
+ it('should allow a serviceAccountEmail to be set', () => {
+ const serviceAccountEmail =
+ 'test-service-account@test.iam.gserviceaccount.com';
+ const fn = functions
+ .runWith({
+ serviceAccountEmail,
+ })
+ .auth.user()
+ .onCreate((user) => user);
+
+ expect(fn.__trigger.serviceAccountEmail).to.equal(serviceAccountEmail);
+ });
 });

src/cloud-functions.ts

@@ -272,6 +272,7 @@ export interface TriggerAnnotated {
  timeout?: string;
  vpcConnector?: string;
  vpcConnectorEgressSettings?: string;
+ serviceAccountEmail?: string;
  };
 }
 
@@ -525,5 +526,9 @@ export function optionsToTrigger(options: DeploymentOptions) {
  trigger.vpcConnectorEgressSettings = options.vpcConnectorEgressSettings;
  }
 
+ if (options.serviceAccountEmail) {
+ trigger.serviceAccountEmail = options.serviceAccountEmail;
+ }
+
  return trigger;
 }

src/function-builder.ts

@@ -142,6 +142,7 @@ export function region(
  * 4. vpcConnector: id of a VPC connector in same project and region
  * 5. vpcConnectorEgressSettings: when a vpcConnector is set, control which
  * egress traffic is sent through the vpcConnector.
+ * 6. serviceAccountEmail: Specific service account for the function
  *
  * Value must not be null.
  */

src/function-configuration.ts

@@ -110,6 +110,11 @@ export interface RuntimeOptions {
  * Egress settings for VPC connector
  */
  vpcConnectorEgressSettings?: typeof VPC_EGRESS_SETTINGS_OPTIONS[number];
+
+ /**
+ * Specific service account
+ */
+ serviceAccountEmail?: string;
 }
 
 export interface DeploymentOptions extends RuntimeOptions {