Solutionunvalidated
Grant the trigger's service account run.invoker on the Cloud Run service, and let IAM propagate (1-7 min; Pub/Sub retries with backoff so a queued message succeeds once it lands) — Stage 3 (trigger). Outcome: a queued message succeeds once it lands.
b2c6b2a3-48ee-4d17-8e7e-ed1ca07843d9
Grant the trigger's service account run.invoker on the Cloud Run service, and let IAM propagate (1-7 min; Pub/Sub retries with backoff so a queued message succeeds once it lands) — Stage 3 (trigger). Outcome: a queued message succeeds once it lands.