Home / server / Questions / 1091574
In Process
Dzmitry Lazerka
Asked: 2022-01-30 07:32:33 +0800 CST

How to get K8S node networking tags for Autopilot cluster?

  • 772

I'm trying to set up GKE with Standalone NEG (avoiding Ingress, and using Terraform for Load Balancer setup instead). Everything works fine, but so far I've been using Firewall Rules from another Ingress.

But to create a proper Firewall Rule, I need GKE_NODE_NETWORK_TAGS. But I cannot set them when creating an Autopilot cluster. I cannot list nodes as listed in the docs as well, as Autopilot nodes are not visible for gcloud compute instances describe.

How to create the Firewall Rule properly for an Autopilot cluster?

PS: Docs on Standalone NEGs: https://cloud.google.com/kubernetes-engine/docs/how-to/standalone-neg#attaching_a_load_balancer_to_your_standalone_negs

google-cloud-platform google-kubernetes-engine

2 Answers

  1. When set to Autopilot, GKE automatically creates the firewall rules and you can take a look at them by typing the gcloud command:

    gcloud compute firewall-rules list --filter="name=gke-autopilot"

    For a more detailed view:

    gcloud compute firewall-rules list --filter="name=gke-autopilot" --format=json

    Although is possible to update the firewall rules and add the desired target tags with the command:

    gcloud compute firewall-rules update firewall-rule-name \
--target-tags=tag-name

    As you correctly pointed out, it is not possible to set the tags in any autopilot's node since these are managed by Google, you would need to configure your cluster as a Standard one instead.

    • 1

  2. Network tags are not currently supported by Autopilot but the feature has been under development and will roll out very soon in the RAPID release channel.

    • 1