Private Google Access is not a private subnet. That simply allows your VMs to access google service without a public IP. You still have to make VMs without a public IP, which GKE does not support yet.
On Wed, Jul 19, 2017 at 12:14 PM, Cybage ALM <cybage.almdev...@gmail.com> wrote: > I have created custom Google Cloud VPC, then created custom Private > Network Access Subnet under that VPC. > > Below are Setting of Private Subnet > > > [image: Inline image 2] > > Then while creating GKE Cluster we selecting Network as Custom Created VPC > and Subnetwork which we have created Private Subnet as above. > > These are steps we have followed to launch cluster in Private Subnet. > > > > On Wed, Jul 19, 2017 at 10:32 PM, 'Tim Hockin' via Kubernetes user > discussion and Q&A <kubernetes-users@googlegroups.com> wrote: > >> How did you create these private/public subnets? GKE should not allow >> you to create a cluster in a Network that doesn't have a default route >> to internet. Routes are per-Network, not per-SubNetwork. >> >> On Tue, Jul 18, 2017 at 11:27 PM, nnilesh7...@gmail.com >> <cybage.almdev...@gmail.com> wrote: >> > On Tuesday, July 18, 2017 at 8:52:47 PM UTC+5:30, Tim Hockin wrote: >> >> GKE relies on public IPs to access the hosted master, for now. >> >> >> >> On Tue, Jul 18, 2017 at 1:46 AM, nnilesh7...@gmail.com >> >> <cybage.almdev...@gmail.com> wrote: >> >> > I'm trying to launch Google Container Engine (GKE) in Private GCP >> network Subnet. >> >> > >> >> > I have created custom Google Cloud VPC, then I have created custom >> Private Network Access Subnet too under that VPC. >> >> > >> >> > 1) When I create GKE cluster with Private Subnet, still my >> Kubernetes nodes assigned with Public IP. Why it is so ? As per Google >> Document private instance should get Private IP. >> >> > >> >> > 2) If I create cluster in Private, can I connect my container >> application to Google SQL instance ? >> >> > >> >> > 3) Is any recommendation to launch GKE cluster should launched in >> Public Subnet only, not in Private Subnet ? >> >> > >> >> > -- >> >> > You received this message because you are subscribed to the Google >> Groups "Kubernetes user discussion and Q&A" group. >> >> > To unsubscribe from this group and stop receiving emails from it, >> send an email to kubernetes-users+unsubscr...@googlegroups.com. >> >> > To post to this group, send email to kubernetes-users@googlegroups. >> com. >> >> > Visit this group at https://groups.google.com/group/kubernetes-users >> . >> >> > For more options, visit https://groups.google.com/d/optout. >> > >> > Thank you very much Tim, for your reply!! >> > >> > So for now GKE cluster we have to launch in Public Subnet. Right? >> > >> > Observation : We have launched GKE cluster in Private Subnet, but GKE >> Cluster is behaving same as if its launch in Public Subnet. >> > >> > -- >> > You received this message because you are subscribed to the Google >> Groups "Kubernetes user discussion and Q&A" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an email to kubernetes-users+unsubscr...@googlegroups.com. >> > To post to this group, send email to kubernetes-users@googlegroups.com. >> > Visit this group at https://groups.google.com/group/kubernetes-users. >> > For more options, visit https://groups.google.com/d/optout. >> >> -- >> You received this message because you are subscribed to a topic in the >> Google Groups "Kubernetes user discussion and Q&A" group. >> To unsubscribe from this topic, visit https://groups.google.com/d/to >> pic/kubernetes-users/YK0JNgTIHyI/unsubscribe. >> To unsubscribe from this group and all its topics, send an email to >> kubernetes-users+unsubscr...@googlegroups.com. >> To post to this group, send email to kubernetes-users@googlegroups.com. >> Visit this group at https://groups.google.com/group/kubernetes-users. >> For more options, visit https://groups.google.com/d/optout. >> > > -- > You received this message because you are subscribed to the Google Groups > "Kubernetes user discussion and Q&A" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to kubernetes-users+unsubscr...@googlegroups.com. > To post to this group, send email to kubernetes-users@googlegroups.com. > Visit this group at https://groups.google.com/group/kubernetes-users. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Kubernetes user discussion and Q&A" group. To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-users+unsubscr...@googlegroups.com. To post to this group, send email to kubernetes-users@googlegroups.com. Visit this group at https://groups.google.com/group/kubernetes-users. For more options, visit https://groups.google.com/d/optout.
