gcloud run services proxy - proxy a service to localhost authenticating as the active account or with the specified token

gcloud run services proxy(SERVICE :--namespace=NAMESPACE)[--port=PORT][--region=REGION][--tag=TAG][--token=TOKEN][GCLOUD_WIDE_FLAG …]

You can use this to test services protected with IAM authentication.

The Cloud Run service must be reachable from the machine running this command.For example, if the Cloud Run Service is configured to only allowinternal ingress, this command will not work from outside theservice's VPC network.

gcloudrunservicesproxymy-service--port=8080

To proxy the existing traffic tag 'my-tag' on the service 'my-service:

gcloudrunservicesproxymy-service--tag=my-tag

Service resource - Service to proxy locally. The arguments in this group can beused to specify the attributes of this resource.

This must be specified.

SERVICE

ID of the service or fully qualified identifier for the service.

To set theservice attribute:

• provide the argumentSERVICE on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--namespace=NAMESPACE

Specific to Cloud Run for Anthos: Kubernetes namespace for the service.

To set thenamespace attribute:

• provide the argumentSERVICE on the command line with a fullyspecified name;
• provide the argument--namespace on the command line;
• set the propertyrun/namespace;
• For Cloud Run on Kubernetes Engine, defaults to "default". Otherwise, defaultsto project ID.;
• provide the argumentproject on the command line;
• set the propertycore/project.

--port=PORT

Local port number to expose the proxied service. If not specified, it will beset to 8080.

--region=REGION

Region in which the resource can be found. Alternatively, set the property[run/region].

--tag=TAG

Traffic tag of the service to expose via the proxy. If not specified, thedefault service URL will be proxied which may serve different revisions based ontraffic-splits. Custom tags can be used to proxy specific revisions. Please seehttps://cloud.google.com/run/docs/rollouts-rollbacks-traffic-migration#tags.

--token=TOKEN

The specific identity token to add to all requests of the proxied service. Ifnot specified, the identity token of the currently active authenticated accountwill be used (e.g. gcloud auth print-identity-token).

Run$gcloud help for details.