Zitadel in Cloud Run is returning 403

I've set up Zitadel to run in Cloud Run behind LB and when I try to access it I get 403 error, error is coming from Zitadel, not from LB. Could someone help me debug why this is happening or provide tutorial or example YAML I could follow? My config YAML attached