Apigee x with a southbound cloud run inside a VPC

Google Cloud Apigee
1

Hello,

I have an Apigee instance in a gcp project that has backends in different Gcp projects. Apigee has its VPC and the backends has also their VPC, i’ve activated VPC peering in the backends VPC.

The backends are mostly serverless (Cloud run) with an internal networking.

I can’t get Apigee to connect to these backends i have a Forbidden access. (same thing as if you try to connect to the backends from internet). How can i get Apigee to connect to the backends in internal network.

2

Can you check if the option “Allow unauthenticated invocations” under CloudRun security tab is selected. If not, you will get the Forbidden error as CloudRun is expecting auth tokens in the request.

Checkout these articles, you can get details on how to wire things to get CloudRun as backend target for Apigee proxies. Article 1 , Article 2

Thanks.

3

Have you checked out these options:
https://cloud.google.com/run/docs/securing/private-networking#from-private-network

Thanks.