gcp v5.41.0 - Pub/Sub event handlers now work where organization policy requires OIDC authentication

Nov 12, 2026•GuardrailsMods

What's new?

  • Guardrails event handlers now install in GCP organizations whose organization policy requires OIDC authentication on Pub/Sub push subscriptions, where the subscription previously failed to create. Set GCP > Turbot > Event Handlers > Pub/Sub > Subscription > OIDC Service Account Email and, if your policy requires it, GCP > Turbot > Event Handlers > Pub/Sub > Subscription > OIDC Audience; the GCP > Turbot > Event Handlers > Pub/Sub control then creates the push subscription with OIDC authentication. Both policies are empty by default, and the subscription is unchanged until you set them.

Policy Types

Added

  • GCP > Turbot > Event Handlers > Pub/Sub > Subscription > OIDC Audience
  • GCP > Turbot > Event Handlers > Pub/Sub > Subscription > OIDC Service Account Email