my goal is to do SSL pinning (mobile apps), with my cloud run backend
Plan A:
Creating a domain mapping for cloud run service, is there a no way to get the SSL cert? looks like its not possible.
Plan B:
Setup load balancer in front of cloud run
Followed instructions on https://cloud.google.com/load-balancing/docs/https/setting-up-https-serverless
Setup
- “Create the load balancer” section > Frontend > create cert > Google managed cert. domain: “api..com”
- “Connect your domain to your load balancer” section. my “A record” “Name=api” and “data=”
Questions with load balancer:
- “reserved an external IP address” section. I reserved an external IP address. but what do i do with this? this is line 1 of image. looks like “create a load balancer” instructions already created an IP, see line 2 of image.
- testing load balancer. browser url:
shows connection reset. whats wrong with my setup?
other links i read
Configuring Cloud Run services and GCS Buckets with a load balancer