Google Workflow调用Cloud Build触发器报400错误求助

需要复现的gcloud命令：

gcloud builds triggers run aaa-bbb-ccc-ddd-eee --region="us-central1" --project=prj-dev3 --branch="ci-cd"

参数说明：

• xxx：项目编号
• prj-dev3：项目ID
• aaa-bbb-ccc-ddd-eee：触发器ID

第一次尝试：调用区域触发器API #

尝试调用googleapis.cloudbuild.v1.projects.locations.triggers.run，Workflow步骤如下：

- buildSite:
    call: googleapis.cloudbuild.v1.projects.locations.triggers.run
    args:
      name: projects/xxx/locations/us-central1/builds/aaa-bbb-ccc-ddd-eee
      body:
        projectId: prj-dev3
        triggerId: aaa-bbb-ccc-ddd-eee
        source:
          branchName: "ci-cd"

返回400错误：

HTTP server responded with error code 400
in step "buildSite", routine "main", line: 100
{
  "body": "<html lang=\"en\" dir=ltr><meta charset=utf-8><meta name=viewport content=\"initial-scale=1, minimum-scale=1, width=device-width\"><title>Error 400 (Bad Request)!!1</title><style nonce=\"Al2U9MAVutAwFsudi6tIqg\">*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{color:#222;text-align:unset;margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px;}* > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}pre{white-space:pre-wrap;}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px}</style><main id=\"af-error-container\" role=\"main\"><a href=//www.google.com><span id=logo aria-label=Google role=img></span></a><p><b>400.</b> <ins>That’s an error.</ins><p>The server cannot process the request because it is malformed. It should not be retried. <ins>That’s all we know.</ins></main>",
  "code": 400,
  "headers": {
    "Alt-Svc": "h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000",
    "Cache-Control": "no-cache, no-store, max-age=0, must-revalidate",
    "Content-Length": "1695",
    "Content-Type": "text/html; charset=utf-8",
    "Date": "Sun, 09 Feb 2025 12:00:18 GMT",
    "Expires": "Mon, 01 Jan 1990 00:00:00 GMT",
    "P3p": "CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"",
    "Pragma": "no-cache",
    "Server": "ESF",
    "Set-Cookie": "NID=521=zL9ULQim19xLeNkYKvp0PJ82c_KDJ0olqVlQBNy62wkT6f_k91V2h3Wh9qpEgMZbziNtcFOsBs2A9rnNJjXqDi9_7EbCBSrK6YIyUrpbHG469mtQ7MN1VIYI56l8k0e9u8UHdYAkamsRD8PFaZgO62cLmYMSI_j7w1D4q-ilfrc; expires=Mon, 11-Aug-2025 12:00:18 GMT; path=/; domain=.cloudbuild.googleapis.com; HttpOnly",
    "X-Content-Type-Options": "nosniff",
    "X-Xss-Protection": "0"
  },
  "message": "HTTP server responded with error code 400",
  "tags": [
    "HttpError"
  ]
}

第二次尝试：调用全局触发器API #

此前尝试过调用googleapis.cloudbuild.v1.projects.triggers.run（适用于全局触发器，后改为区域版本），Workflow步骤如下：

- buildSite:
    call: googleapis.cloudbuild.v1.projects.triggers.run
    args:
      projectId: prj-dev3
      triggerId: aaa-bbb-ccc-ddd-eee
      name: projects/xxx/locations/us-central1/builds/aaa-bbb-ccc-ddd-eee
      body:
        branchName: "ci-cd"

返回400错误：

HTTP server responded with error code 400
in step "buildSite", routine "main", line: 100
{
  "body": {
    "error": {
      "code": 400,
      "message": "Request contains an invalid argument.",
      "status": "INVALID_ARGUMENT"
    }
  },
  "code": 400,
  "headers": {
    "Alt-Svc": "h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000",
    "Content-Length": "127",
    "Content-Type": "application/json; charset=UTF-8",
    "Date": "Sun, 09 Feb 2025 11:13:29 GMT",
    "Server": "ESF",
    "Vary": "Origin, X-Origin, Referer",
    "X-Content-Type-Options": "nosniff",
    "X-Frame-Options": "SAMEORIGIN",
    "X-Xss-Protection": "0"
  },
  "message": "HTTP server responded with error code 400",
  "tags": [
    "HttpError"
  ]
}

排查思路与解决建议 #

• 修正API路径参数：区域触发器的name参数格式应为projects/{project-id}/locations/{region}/triggers/{trigger-id}，你之前错误地写成了.../builds/...，将builds替换为triggers即可。
• 简化请求体：name参数已包含项目ID、区域和触发器ID信息，无需在body中重复传递projectId和triggerId，仅保留source.branchName即可。修正后的Workflow步骤：

  - buildSite:
      call: googleapis.cloudbuild.v1.projects.locations.triggers.run
      args:
        name: projects/prj-dev3/locations/us-central1/triggers/aaa-bbb-ccc-ddd-eee
        body:
          source:
            branchName: "ci-cd"
  

• 验证权限配置：确保Workflow使用的服务账号拥有cloudbuild.triggers.run权限（例如Cloud Build Editor角色），避免因权限不足导致的隐性错误。
• 对比CLI请求调试：执行gcloud builds triggers run --log-http命令，查看CLI实际发送的API请求格式，与Workflow的请求进行对比，快速定位格式差异。
• 添加日志调试：在Workflow中增加日志输出步骤，打印请求的args和body内容，确认参数格式是否符合API要求。

内容的提问来源于stack exchange，提问作者angelcervera