Advanced Clusters

Back Next

Create firewall rules in the VPC network

Create a firewall rule for the VPC network to allow TCP traffic from the IP addresses of the Secure Agent machine and the NAT gateway.

On Google Cloud, create a firewall rule for the VPC network with the following configuration:

Set the direction of traffic to ingress traffic.

Allow matches.

Add the following target tag:

k8s-infa-resource

Set the primary source filter to filter by IP ranges. Use CIDR notation to set the source IP ranges to the static IP addresses of the Secure Agent machine and the NAT gateway created in step 2.

Set the secondary source filter to filter by source tags. Add the following source tag:

k8s-infa-resource

Specify the following protocols and ports:

TCP ports: 22, 80, 178-180, 5473, 6443, 2379-2380, 10250, 10251, 10252, 10257, 10259, 30000-32767

Other protocols: ipip

The following image shows how the firewall rule might appear on the Google Cloud Console: On the Google Cloud Console, under VPC Network, the Firewall tab is selected
and the details of a firewall rule are open. Annotations highlight the settings
for Direction, Action on match, Targets, Source filters, and Protocols and
ports.

On the Google Cloud Console, under VPC Network, the Firewall tab is selected
and the details of a firewall rule are open. Annotations highlight the settings
for Direction, Action on match, Targets, Source filters, and Protocols and
ports.

Rename Saved Search

Table of Contents

Advanced Clusters

Advanced Clusters

Create firewall rules in the VPC network

Create firewall rules in the VPC network