Hello, I'd like to have your best practices about networking and GKE as they still are painful points for us.
We have currently two points that are hard for us to manage : - we need to add some additional tags in our clusters nodes in order to manage firewalling rules. AFAIK it's not possible to add tag in cluster's node. This is a pain as we need to edit every node every time they are (re)-created (for instance after every node migration). As we have dynamic usage of clusters, we would like to avoid using clusters tag for firewalling as it would imply to change firewalling rules everytime we change (add/delete) a new cluster. We asked for similar feature on dataproc and it was added here : https://cloud.google.com/dataproc/docs/release-notes/service#january_27_2016 - we are using tim advice here https://github.com/kubernetes/kubernetes/issues/14545#issuecomment-230690123 and setup GCE static routes to nodes to access clusters services range from VPN. But we need to update routes manually when we scale up and down clusters and when we add or remove clusters. Both of these usage prevent us to use https://cloud.google.com/container-engine/docs/cluster-autoscaler. Is there any workaround ? Is there any plan on roadmap to be able to specify additional tags on nodes and routes to clusters service range ? Regards, -- You received this message because you are subscribed to the Google Groups "Kubernetes user discussion and Q&A" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/kubernetes-users. For more options, visit https://groups.google.com/d/optout.
