Blog
Google Cloud Run: CORS at the ingress, nginx sidecars, and health checks that must not strip Vary
Cloud Run’s request path can include sidecars; ensure OPTIONS reaches the container that owns CORS logic.
1 min read
gcpcloud-runcors
IAM and invokers
Authenticated invokers change how browsers obtain tokens—document OAuth client IDs for SPAs.
VPC egress for private APIs may add latency visible in preflight round trips.
Observability
Cloud Logging filters should tag origin and trace IDs together for cross-region replicas.
Export metrics on 499 client disconnects to catch aggressive browser timeouts.