Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

Allow internal traffic to VM Instance from Cloud Run instances

Hello,

I am running a PgBouncer service on a VM Instance on Compute Engine. This service needs to be accessed by code hosted on Cloud Run Services.

The problem is that I don't want the PgBouncer to be available outside of my GCP project. I have the PgB and the Cloud Run services on the same region and therefore I should think on the same subnet (right?). But if I try to connect using the internal IP of the PgB VM instance the connection fails. If I use the external IP it works, but then I can't create a firewall rule, as the Cloud Run instances have dynamic external IP's. 

Does anyone have a suggestion as what to do here?

0 4 1,640