Search code examples
firebasegoogle-cloud-platformreverse-proxyfirebase-hostinggoogle-cloud-run

Can Firebase Hosting proxy an internal Cloud Run service?


I have a Cloud Run service that's working fine when I send requests from inside my VPC network (from a GCE instance). The service is configured as an internal service with this in the YAML

    run.googleapis.com/ingress: internal
    run.googleapis.com/ingress-status: internal

Is it possible to still proxy it with Firebase Hosting as specified here?

When I try, I get exactly the same error that I get when I try to contact the Cloud Run service from outside the VPC: 403 Forbidden but I'm not sure if this is just not possible or I'm missing a configuration/i-am permission somewhere to allow Firebase Hosting to invoke the Cloud Run service


Solution

  • Firebase Hosting makes requests to Cloud Run services over public networks. It is not currently possible to use internal ingress with Firebase Hosting.