kosli snapshot cloud-run

Report a snapshot of Cloud Run services and jobs in a Google Cloud project and region to Kosli.

Synopsis

kosli snapshot cloud-run ENVIRONMENT-NAME [flags]

Report a snapshot of Cloud Run services and jobs in a Google Cloud project and region to Kosli.
Coverage:

Deploy method	Container?	Reported	Notes
Cloud Run service (image-deployed)	Yes	✓ Full
Cloud Run service (source / Buildpacks)	Yes (built for you)	✓ Full
Cloud Run Job	Yes	✓ Full
Cloud Run function (Cloud Functions 2nd gen)	Yes (Buildpacks)	✓ Full
Cloud Functions 1st gen	No (Google packages the source)	✗
App Engine Standard	No (gVisor sandbox, not a container)	✗	Not currently supported in the CLI.
App Engine Flexible	Yes (containers on managed VMs)	✗
GKE (Standard / Autopilot)	Yes	✗	Use kosli snapshot k8s instead.
Cloud Run for Anthos	Yes (knative on GKE)	✗
Compute Engine + Container-Optimized OS	Yes (Docker on a VM)	✗

Each Cloud Run service contributes one artifact per revision in its traffic configuration. Each Cloud Run Job contributes one artifact, identified by the image bound to the Job (Jobs do not have a revision/traffic-split model). Idle Jobs (no currently-running Execution) are included.

GCP authentication uses Application Default Credentials. On a developer machine, run gcloud auth application-default login; in GCE/GKE/Cloud Run the metadata server / Workload Identity is used automatically. The caller needs roles/run.viewer on the target project, plus roles/artifactregistry.reader on the Artifact Registry repository (or the project) for digest and tag resolution on tag-pinned images. Missing the AR role is non-fatal — tag-pinned artifacts then surface with empty digests.

Digest and tag resolution is scoped to Artifact Registry (*-docker.pkg.dev) and the legacy Container Registry (*.gcr.io). Images from other registries (Docker Hub, Quay, ECR, etc.) are reported as-is.

Skip all filtering flags to report every service and every job in the given project + region. Use --include and/or --include-regex to snapshot only a subset, OR --exclude and/or --exclude-regex to omit a subset; include and exclude are mutually exclusive. Filters apply uniformly to both service and job names and are case-sensitive.

Pass --resolve-names to rewrite digest-pinned Service artifact names back to their deploy-time tags (commit SHA / version) via an Artifact Registry reverse-lookup. Only supported for Artifact Registry hosts.

Flags

Flag	Description
-D, --dry-run	[optional] Run in dry-run mode. When enabled, no data is sent to Kosli and the CLI exits with 0 exit code regardless of any errors.
--exclude strings	[optional] The comma-separated list of Cloud Run service or job names to exclude. Can’t be used together with --include or --include-regex.
--exclude-regex strings	[optional] The comma-separated list of Cloud Run service or job name regex patterns to exclude. Can’t be used together with --include or --include-regex.
-h, --help	help for cloud-run
--include strings	[optional] The comma-separated list of Cloud Run service or job names to snapshot. Can’t be used together with --exclude or --exclude-regex.
--include-regex strings	[optional] The comma-separated list of Cloud Run service or job name regex patterns to snapshot. Can’t be used together with --exclude or --exclude-regex.
--project string	[required] GCP project ID.
--region string	[required] GCP region (e.g. europe-west1).
--resolve-names	[optional] When set, resolve digest-pinned artifact names back to their deploy-time tags (commit SHA / version) via an Artifact Registry reverse-lookup. Requires roles/artifactregistry.reader. Default: artifacts keep whatever name the Cloud Run API returned (digest-pinned for Services, deploy-time form for Jobs).

Flags inherited from parent commands

Flag	Description
-a, --api-token string	The Kosli API token.
-c, --config-file string	[optional] The Kosli config file path. (default “kosli”)
--debug	[optional] Print debug logs to stdout.
-H, --host string	[defaulted] The Kosli endpoint. (default “https://app.kosli.com”)
--http-proxy string	[optional] The HTTP proxy URL including protocol and port number. e.g. http://proxy-server-ip:proxy-port
-r, --max-api-retries int	[defaulted] How many times should API calls be retried when the API host is not reachable. (default 3)
--org string	The Kosli organization.
-q, --quiet	[optional] Suppress non-critical warning messages. Errors and normal output are not affected. If both --quiet and --debug are set, --debug wins.

Examples Use Cases

These examples all assume that the flags --api-token, --org, --host, (and --flow, --trail when required), are set/provided.

report every Cloud Run service and job in a project + region

kosli snapshot cloud-run yourEnvironmentName 
	--project yourGCPProject 
	--region yourGCPRegion 

report only the named services and jobs

kosli snapshot cloud-run yourEnvironmentName 
	--project yourGCPProject 
	--region yourGCPRegion 
	--include hello-world,sandman-job 

report everything except the kosli-reporter job (the Job that runs this command)

kosli snapshot cloud-run yourEnvironmentName 
	--project yourGCPProject 
	--region yourGCPRegion 
	--exclude kosli-reporter