Authenticating to cloud function from PubSub push subscription

Question

We are using PubSub for queuing utilizing a push subscription pointing at an http-triggered cloud function. According to this documentation Cloud Run and App En