I'm an Enterprise Architect based in the UK, working across Google Cloud, AWS, and Azure.
I design and deliver large scale cloud and AI programmes. The work tends to live in the gap between what the technology can do and what the business actually needs. Meeting the requirement without overcomplicating the solution, is where most of my time goes.
This is where I write about Cloud Architecture, Agentic AI, and my honest take on where the industry is heading. If something here is useful, I'd love to hear from you on LinkedIn.
The same ADK agent container deployed to both platforms, with real cold-start numbers, a real load test, and an actual recommendation, anchored in a genuine Workload Identity gap GKE Autopilot has that Cloud Run doesn't.
When one ADK agent delegates to another, identity is not inherited along the way: two Cloud Run services, two service accounts, and the IAM binding that actually defines blast radius.