google-kubernetes-engine - 与 Google Container Engine 共享 VPC 网络

Question

几天来我一直在寻找这个问题的答案。该图像显示了我正在尝试做的事情。基本上我想在服务项目中构建一个容器引擎集群，但在主机项目中使用来自共享 vpc 的网络。这与计算引擎一起工作得很好，因为容器引擎利用计算引擎，我看不出它有什么问题，但没有配置它的选项。

最终目标是在混合云场景中使用它，对于每个容器项目，我们宁愿利用单个 vpn 隧道，而不是为每个项目构建新隧道。这根本无法扩展。

Google Cloud Container engine networking

Answer 1

更新 现在正式支持。参见 Adam MacDonald's answer .

---

我一直在寻求实现相同的设置，但目前似乎不支持使用共享 VPC 的服务项目中的 GKE:

Shared VPC limitations

• Quota of 100 shared VPC host projects per Cloud Organization.
• Quota of 100 service projects attached to any given shared VPC host project.
• External load balancing is not supported across projects. This means that the frontend of a load balancer must exist in the same project as the backends, but the backend instances in service projects can be created in the shared VPC network of the host project.
• GKE clusters in a service project associated with an shared VPC network are not supported.
• GAE Flexible in a service project associated with an shared VPC network is not supported.
• Deployment manager is limited to manage resources within a single project.

https://cloud.google.com/compute/docs/shared-vpc/provisioning-shared-vpc#shared_vpc_limitations