5 posts tagged Cloud Run
Migrating an app-layer IP check to Cloud Armor on an external load balancer: why the ingress lock is the part that actually matters, the carve-out a task queue forces, and an X-Forwarded-For reversal that 403s every user at cutover.
Moving the app off its default *.run.app URL onto a company subdomain with Cloud Run domain mappings: the domain-verification step the runbooks skip, why a zone apex takes A/AAAA records instead of a CNAME, why the cutover order matters when an OIDC audience is involved, and a 502 that looked like a broken deploy but was a TLS cert still propagating.
Deploying the still-mock-backed app to Cloud Run gated two ways (Slack SSO at the app layer and an office-IP allowlist) with a standalone container and keyless GitHub Actions via Workload Identity Federation. Plus the cost call between an app-layer IP check and Cloud Armor, and the auth gate that forced collapsing an internal self-fetch.
How I fixed the bot serving outdated knowledge after GCS file updates by adding a reload endpoint, OIDC authentication, and wiring up GCS change notifications through Pub/Sub.
How I deployed a Python Flask app to GCP Cloud Run with GitHub Actions CI/CD, coming from an AWS background. Spoiler: easier than you think.
