Firebase custom domain mapping with IAP

[nick-youngblut]

Given that the Cloud Run Custom Domain mapping feature will soon be removed (see attached), I need to find a new way of mapping my internally-facing apps to custom domains (e.g., my-app.my-team.my-company.com). 

It appears that I will still be able to map custom domains via firebase (https://cloud.google.com/run/docs/mapping-custom-domains#firebase), but it's not clear how to use IAP with that set up, as I was doing with the "Custom Domains - Google Cloud Load Balancing" integration that I have been using.

Can IAP be used with Firebase custom domain mapping?

[greb]

Hi @nick-youngblut,

It is true that custom domain mapping on Cloud Run will continue to function with Firebase even after the integration is stopped, however, Firebase Hosting does not offer direct support for IAP as Google Cloud Load Balancer does. IAP requires authentication and requires a higher level of control compared to what Firebase provides.

Here are a some recommendations:

• You can continue to utilize manual Cloud Load Balancer setup for traffic management, including custom domains, along with using IAP for access control.
  
• Ideal for internal applications, Internal HTTP(S) Load Balancing allows custom domains and integrates with IAP.
  
• Combining Firebase Hosting for the front end with setting up either a load balancer or proxy using IAP for security is a hybrid approach.

I hope the above information is helpful!