Configuring GKE ingress to allow only Google requests (Cloud Tasks)

188 Views Asked by At

I have a public HTTP API service running in a GKE and am considering using Cloud Tasks with an HTTP target endpoint. I know that securing those via eg oidc tokens is the preferred way but I’m wondering anyway if it would be possible to somehow allow access to this route (set of routes) for only Cloud Tasks calls. As far as I can tell, there is no set of IPs I could whitelist so I’m wondering if there is another way to make it behave as if it’s happening in an internal network. Alternatives and/or suggestions welcome.

0

There are 0 best solutions below