IssueTracker

This will create a feature request which anybody can view and comment on.

Please describe your requested enhancement. Good feature requests will solve common problems or enable new use cases.

Problem you have encountered:

• When setting up a Pub/Sub push subscription and setting the endpoint of a Cloud Run Job the error message that appears in the logs is not clear enough.

• Please note that this is a limitation since this only works with the default run.app endpoint for a Cloud Run service as seen here 1 and this is acknowledged and not the issue we are reporting here.

• As seen here 1, the error message is Error: Request is prohibited by organization's policy. However, this is not the case.

What you expected to happen:

• We would expect an error message similar to Target type endpoint not supported, Target type not permitted due to VPC Service Control restrictions or something similar.

Steps to reproduce:

1. Create a VPC Perimeter (for testing, you can add a project and all services allowing all traffic from any identity to all services in the perimeter in ingress and egress rules.)
2. Create a topic and a push subscription with cloud run job as an endpoint (format https://CLOUD_RUN_REGION-run.googleapis.com/apis/run.googleapis.com/v1/namespaces/PROJECT-ID/jobs/JOB-NAME:run).
3. This will create the Request is prohibited by organization's policy error message in the logs.

Question:

• Is it possible to improve the error message of this error so that it's clear that it's caused by VPC SC?