Question

A development team runs a Cloud Run service that must call a REST API hosted on a Compute Engine VM using the VM's internal IP address (10.20.0.15). The Cloud Run service currently cannot reach the VM. The team wants the simplest supported configuration that routes only the RFC 1918 internal traffic through the VPC while keeping public internet egress unchanged. What should you configure?

Accepted Answer

Create a Serverless VPC Access connector in the same region and VPC, then set the Cloud Run egress setting to route only requests to private IP ranges through the connector.

Answer

Set the Cloud Run egress setting to route all traffic through a Serverless VPC Access connector so that both internet and internal traffic use the VPC.

Answer

Assign an external IP to the Compute Engine VM and add a firewall rule allowing ingress from Cloud Run's public IP range.

Answer

Enable Private Google Access on the subnet containing the VM so that Cloud Run can reach the internal IP address.