Setup (simplified):
- 2 Cloud Functions with "Allow internal traffic only" Ingress setting, where one is HTTP triggered
- Calling function receives data from outside (communication through Shared VPC) and inside GCP by calling other HTTP function in the same Project A
Issue:
- To receive the data from HTTP function we should configure Serverless VPC Connector in Project A pointing to its VPC. This blocks communication with 3rd party API.
- To receive data from 3rd party API we should configure Serverless VPC Connector in Shared VPC Project pointing to its VPC. This blocks communication with HTTP triggered function.
I know it is possible to set up VPC Service Control perimeter with these 2 projects allowing internal communication but for now it is not an option.
QUESTION: Is there other way to make this setup working as expected and if so which resources/services should be considered?