Fun fact, GCP cloud run still accepts TLS 1.1 connections by default. You can enforce higher versions only with a load balancer