Beyond Deploy: Unlocking gRPC's Superpowers on Cloud Run
summary
Cloud Run gets concrete gRPC integrations: XDS gains a new system_root_search flag so clients can switch to the OS trust store for public ingress TLS; clients perform a gated secure authority overwrite to rewrite the :authority header so a single shared ingress proxy routes to distinct backends; gRPC adds a GCP O filter and call-credential type that fetches, caches, and injects audience-bound JWTs from the metadata server; these pieces are implemented in gRPC Go and wire into Traffic Director / Anthos XDS control planes to make proxyless semantics work on serverless.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 0:20Serverless platforms
- 1:23Cloud Run platform
- 2:48Cloud Service Mesh
- 3:30XDS control plane security
- 4:33Service mesh challenges
- 5:56Client authenticating proxy
- 7:21System root search in gRPC
- 8:23Routing via shared proxy
- 9:05Secure authority overwriting
- 10:07Proxy authentication problems
- 11:10Automatic JWT handling
- 13:19XDS integration
- 14:01Summary
related talks
08mgRPC - Past, Present and Future
32mCloud Run, serverless containers in action
33mCloud Foundry Runtime PMC Overview - Dieu Cao, Pivotal
30mRunning Cloud Native App Development with Kubernetes Containers
20mComposing the Cloud, 2.0
28mCloud in your Cloud
28mOpening keynote
25mCloud Run, serverless containers in action