1# Assessment: Cloud Run to Container Apps
2 
3## Checklist
4 
5### 1. Service Configuration
6- **CPU/Memory**: Cloud Run (1–4 vCPU, 128 MiB–32 GiB) → Container Apps (0.25–4 vCPU, 0.5–8 Gi)
7- **Images**: Registry location (GCR or Artifact Registry), image size, base image
8- **Port**: Exposed port (Cloud Run default 8080)
9- **Environment Variables**: Static values, secret references, service URLs
10 
11### 2. Request Handling
12- **Concurrency**: Per instance (default 80, max 1000) → Container Apps (1–300)
13- **Min/Max Instances**: 0–1000 → Container Apps 0–300 per revision
14- **Timeout**: Max 60 min → Container Apps max 30 min (1800s)
15- **CPU Allocation**: Request-based vs always → Container Apps always allocated
16- **HTTP/2, WebSockets, gRPC**: Document if used
17 
18### 3. Networking
19- **Ingress**: Public, internal (VPC), or internal + load balancing
20- **Custom Domains**: List domains and SSL certificates
21- **VPC Connector**: Region, IP range, connected VPC
22- **Dependencies**: Cloud SQL, Firestore, Cloud Storage, Pub/Sub, Redis, external APIs
23 
24### 4. IAM & Security
25- **Service Account**: Default or custom
26- **IAM Roles**: Storage, Firestore, Pub/Sub, Secret Manager, Cloud SQL permissions
27- Task role policies → Managed Identity + Azure RBAC
28- Secret Manager access → Key Vault RBAC (recommended) or access policies for vaults still using access-policy mode
29 
30### 5. Observability
31- **Logging**: Destinations, structured logs (JSON)
32- **Monitoring**: Request metrics, CPU/memory, instance count
33- **Tracing**: Cloud Trace → Application Insights
34 
35### 6. Event-Driven
36- **Eventarc**: Pub/Sub triggers, Cloud Storage triggers
37- **Cloud Scheduler**: Schedule (cron), target endpoint
38 
39### 7. Cost Analysis
40- Cloud Run: Request charges, CPU/memory time
41- Data transfer egress charges
42- Container Registry storage
43 
44## Resource Mapping
45 
46| Cloud Run Config | Container Apps Equivalent |
47|------------------|--------------------------|
48| `--concurrency 80` | `--scale-rule-http-concurrency 80` |
49| `--min-instances 0` | `--min-replicas 0` |
50| `--max-instances 10` | `--max-replicas 10` |
51| `--cpu 1` | `--cpu 1.0` |
52| `--memory 512Mi` | `--memory 1Gi` |
53| `--port 8080` | `--target-port 8080` |
54| `--timeout 300` | ingress timeout 300s |
55 
56## Complexity Rating
57 
58- **Low**: Single container, public ingress, standard env vars, no VPC
59- **Medium**: Internal ingress, Pub/Sub triggers, custom service account, Cloud Scheduler
60- **High**: Complex traffic management, VPC networking, multiple Eventarc triggers, long-running requests (>30 min)
61