Can Firebase Hosting proxy an internal Cloud Run service?

Question

I have a Cloud Run service that's working fine when I send requests from inside my VPC network (from a GCE instance). The service is configured as an internal service with this in the YAML

    run.googleapis.com/ingress: internal
    run.googleapis.com/ingress-status: internal

Is it possible to still proxy it with Firebase Hosting as specified here?

When I try, I get exactly the same error that I get when I try to contact the Cloud Run service from outside the VPC: 403 Forbidden but I'm not sure if this is just not possible or I'm missing a configuration/i-am permission somewhere to allow Firebase Hosting to invoke the Cloud Run service

score 1 · Accepted Answer · answered Dec 28 '21 at 18:47

1

Firebase Hosting makes requests to Cloud Run services over public networks. It is not currently possible to use internal ingress with Firebase Hosting.

answered Dec 28 '21 at 18:47

Michael Bleigh

25,334
2
79
85

Thank you @Michael. any sources supporting that? that was my feeling too but i can't find anything saying as much – Hilikus Dec 28 '21 at 22:03
2

It's not in the docs, but I work on Firebase :) – Michael Bleigh Dec 28 '21 at 23:35

Can Firebase Hosting proxy an internal Cloud Run service?

1 Answers1

Linked