Calling Cloud Run from GKE internally

Hey there

I’m trying to debug an issue whereby it looks like traffic from a service running in GKE which is calling a Cloud Run endpoint is going out to the public IP via Cloud NAT, rather than routing internally.

I’ve reviewed https://cloud.google.com/run/docs/securing/private-networking#from-vpc, and I’ve confirmed that the subnet used by the GKE cluster has got “Private Google Access” enabled.
The Cloud Run service is configured to use a Serverless VPC Access Connector in the same VPC.

Any pointers?

Thanks

You may also consider exposing your Cloud run service as an internal IP address in your VPC network and use Private Service Connect so that VPC resources can access your Cloud Run services using its private IP