From ec7650b04ec0ed369cea4f95b056c0c39e704116 Mon Sep 17 00:00:00 2001
From: Mike Brancato <mike@mikebrancato.com>
Date: Wed, 10 Mar 2021 19:07:12 -0500
Subject: [PATCH] Hardcode gvisor, add svc account email output

---
 main.tf | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/main.tf b/main.tf
index 1021ea5..ef80c4b 100644
--- a/main.tf
+++ b/main.tf
@@ -94,6 +94,8 @@ resource "google_cloud_run_service" "default" {
       annotations = {
         "autoscaling.knative.dev/maxScale"        = 1 # HA not Supported
         "run.googleapis.com/vpc-access-connector" = var.vpc_connector != "" ? var.vpc_connector : null
+        # Hardcoded here after a change in the Cloud Run API response
+        "run.googleapis.com/sandbox" = "gvisor"
       }
     }
     spec {
@@ -150,4 +152,8 @@ resource "google_cloud_run_service_iam_policy" "noauth" {
 
 output "app_url" {
   value = google_cloud_run_service.default.status[0].url
-}
\ No newline at end of file
+}
+
+output "service_account_email" {
+  value = google_service_account.vault.email
+}