Secure Google Cloud Run API Calls with Service Account Auth

This workflow provides a secure method to call Google Cloud Run APIs from n8n without making endpoints publicly accessible. It uses a main workflow that invokes a sub-workflow to generate a Google ID token via Service Account authentication, merges it with request context, and sends authenticated HTTP requests to your Cloud Run service. Ideal for running custom logic like scraping or data processing in containerized environments on Cloud Run's free tier.

Benefits include enhanced security through Cloud IAM (no API keys in n8n), cost-efficiency (no servers needed), and seamless integration for single calls or batched operations. It's perfect for developers automating tasks requiring specialized libraries unavailable in n8n, such as Python scripts in Docker on Cloud Run.

Setup involves creating an authenticated Cloud Run service, a Service Account with 'Cloud Run Invoker' role, downloading the private key JSON, and configuring n8n's JWT (PEM) credential. Update variables for service URL/path, customize HTTP method/body, and follow in-workflow sticky notes for options like looping over items.

Use cases: Securely process data with custom Cloud Run services for web scraping, ML inference, or backend logic; integrate with n8n automations for IT/DevOps pipelines without hosting overhead.