Connection from private cluster pods to another private clusters master

7/1/2019

Is it possible to establish a connection between the pods of a private cluster to another private clusters master in separated regions? Just by adding the pod and node ip range to the other master authorized networks did not do the trick.

-- Jan Schumacher
google-kubernetes-engine

1 Answer

7/3/2019

This won't work. The private master endpoint is a regional resource (essentially an internal Load Balancer which is a regional resource). Since both clusters are private, they won't be able to communicate using external endpoints and cross region requests won't work.

You have 2 options:

  1. Set up a proxy that can forward the requests

  2. use public endpoints and configure a nat (Cloud nat or a unmanaged nat). Secure the public endpoint using Master Authorized Networks to ensure that only authorized IPs are able to access the k8s API

-- Patrick W
Source: StackOverflow