Setting IAM policies for Google HTTP functions

[therefromhere]

This is a Feature Proposal

Description

Google now supports IAM policies on HTTP cloud functions, and from November 1st new HTTP functions will be private by default.

Does Serverless have any way of supporting this? Eg to explicitly give HTTP functions “Cloud Invoker=allUsers”, which is currently the default, or to set other IAM policies.

This is being phased into the GCloud sdk (see 258.0.0 release notes https://cloud.google.com/sdk/docs/release-notes#25800_2019-08-13 )

  Cloud Functions
      ▪ Changed gcloud beta functions deploy to disallow unauthenticated
        callers of new functions by default. The GA gcloud functions deploy
        command remains the same.

See also:

forum thread: https://forum.serverless.com/t/setting-iam-policies-for-google-http-functions-since-all-new-gcloud-http-functions-after-nov-1-2019-will-default-private/8686
earlier ticket on other repo: serverless/serverless#6538