Connecting to a Cloud Run app using PSC

[amitkhosla]

Hi,

I am looking for understanding regarding Private Service Connect. If I want to connect from my app in Google VPC to Cloud Run app. Both are in separate projects. 

Can I use Private service connect to keep the cloud run secure (not accessible publicly) as well as can skip passing the ID token?

What all configurations will be required for this (like Service account permission etc).

Thanks & Regards

Amit

[VannGuce · Accepted solution]

Basically the answer is yes, all the features that you mentioned are under the Private Service connect. I believe the best way to understand this feature is by watching this video[1] wherein it was explained how it works.

I will also include another video[2] wherein the configuration is explained and demonstrated, but please be informed that this is not a google video, I only shared it because the configuration is demonstrated in the video which is very helpful in your concern. Also, the example use in the video is Cloud Run.

[1]https://www.youtube.com/watch?v=JAFagcQBV08

[2]https://www.youtube.com/watch?v=BCoxv19yESw

[amitkhosla]

Thanks @VannGuce !!

How does firewalls comes into picture in PSC network?

Does PSC bypass firewall as well?

Thanks & regards

Amit

[VannGuce]

You're welcome. I believe we still need to implement a firewall rule if any given IP address or Port that is needed for communication. Here is where your firewall rule comes in picture, kindly check this documentation[1].


[1]https://cloud.google.com/vpc/docs/configure-private-service-connect-services#begin