Cloud Run as an Agent Runtime: Resource Type, Sandboxes and Agent Identity

Tue, 03 Nov 2026 09:00:00 -0500

If you lead a platform or infrastructure team and are wiring agents into real systems on Google Cloud, Cloud Run’s documentation now covers a lot of the agent runtime. Here is how I’d work through it. Hosting an agent on Cloud Run is three separate decisions, made for each agent. The first is which resource type matches the agent’s loop. The second is where its untrusted tool code runs. The third is which identity it holds. Make the identity decision first, because the functional and identity types can’t be changed or unset once you set them on a resource.

Worker-Pools on RLGeeX

Cloud Run as an Agent Runtime: Resource Type, Sandboxes and Agent Identity