Hi Vikarm. thanks for great article, almost the only useful resource on the net.

I have a question, I want my cloud run not be publicly accessible (unauthenticated) but gateway be publicly accessible, so I expect all calls from gateway be autheticated through a service account between gateway to cloud run, how can I do that.

Also it would be great if you could add final yaml after each major step.