[iennae]

Description

Developers deploying workflows through the Python SDK lacked a sample showing how to pass workflow source contents, execution service accounts, call-log levels, labels, and user environment variables.

Adds create_workflow.py (workflows_create_workflow) using workflows_v1.WorkflowsClient.create_workflow and waiting on the returned long-running operation, along with unit and gated live integration tests.

Note: Stacked on #14797 (refactor/workflows-cloud-client-package) so this PR shows only this sample's diff.

Checklist

Testing

• I have tested this change on a live environment and verified it works as intended. Unit and live integration tests pass on Python 3.13.

Compliance & Style

• I have followed the Sample Guidelines.
• The README is updated with all relevant information (if applicable).
• If this PR adds a new sample directory: I updated the CODEOWNERS file. Not applicable: all changes are inside workflows/cloud-client/.

---

Post-Approval Actions

• Please merge this PR for me once it is approved

[snippet-bot]

Here is the summary of changes.

You are about to add 1 region tag.

• workflows/cloud-client/src/workflows_samples/create_workflow.py:15, tag workflows_create_workflow

---

This comment is generated by snippet-bot.
If you find problems with this result, please file an issue at:
https://github.com/googleapis/repo-automation-bots/issues.
To update this comment, add snippet-bot:force-run label or use the checkbox below:

• Refresh this comment

[gemini-code-assist]

Code Review

This pull request introduces a new sample script, create_workflow.py, which demonstrates how to create a Google Cloud Workflow with logging, labels, and environment variables, along with its corresponding unit and integration tests in create_workflow_test.py. The feedback points out a usability issue in the CLI argument parsing: if a user specifies a custom --project-id but leaves --service-account-email as default, the script uses a hardcoded project ID in the service account email, which will cause the workflow creation to fail. A suggestion is provided to dynamically construct the default service account email using the resolved project ID.

[gemini-code-assist]

If a user runs this script from the command line and specifies a custom --project-id but does not provide --service-account-email, the default service account email will still use the hardcoded 'example-project-id' instead of the user's specified project ID. This will cause the workflow creation to fail because the service account won't exist in their project.

We should dynamically construct the default service account email using the resolved project_id if --service-account-email is not explicitly provided.

Suggested change

	parser.add_argument(
	"--service-account-email",
	default=os.environ.get(
	"SERVICE_ACCOUNT_EMAIL",
	"example-runner@example-project-id.iam.gserviceaccount.com",
	),
	help="Service account the workflow runs as (default: $SERVICE_ACCOUNT_EMAIL)",
	)
	args = parser.parse_args()
	create_workflow(
	project_id=args.project_id,
	location_id=args.location_id,
	workflow_id=args.workflow_id,
	service_account_email=args.service_account_email,
	)
	parser.add_argument(
	"--service-account-email",
	default=os.environ.get("SERVICE_ACCOUNT_EMAIL"),
	help="Service account the workflow runs as (default: $SERVICE_ACCOUNT_EMAIL)",
	)
	args = parser.parse_args()
	service_account_email = args.service_account_email
	if not service_account_email:
	service_account_email = (
	f"example-runner@{args.project_id}.iam.gserviceaccount.com"
	)
	create_workflow(
	project_id=args.project_id,
	location_id=args.location_id,
	workflow_id=args.workflow_id,
	service_account_email=service_account_email,
	)