I have a Cloud Run service that's working fine when I send requests from inside my VPC network (from a GCE instance). The service is configured as an internal service with this in the YAML
run.googleapis.com/ingress: internal
run.googleapis.com/ingress-status: internal
Is it possible to still proxy it with Firebase Hosting as specified here?
When I try, I get exactly the same error that I get when I try to contact the Cloud Run service from outside the VPC: 403 Forbidden
but I'm not sure if this is just not possible or I'm missing a configuration/i-am permission somewhere to allow Firebase Hosting to invoke the Cloud Run service
Firebase Hosting makes requests to Cloud Run services over public networks. It is not currently possible to use internal ingress with Firebase Hosting.