Get startedGet started for free

Connect gateway

1. Connect gateway

Connect Gateway is a GKE feature that simplifies and secures connections and interactions with fleet member clusters, regardless of their location. Connect Gateway builds upon the concept of fleets, which are logical groupings of Kubernetes clusters and other resources that can be managed together. Let's explore the key features and capabilities of Connect Gateway. Permission management can become challenging when working with multiple clusters across different Google Cloud projects. A more centralized and unified approach is to use Connect Gateway, which is discussed in the next lesson. Cluster discovery. You can use the Google Cloud CLI to list and query fleet membership resources to identify registered clusters. Connectivity. Connect Gateway uses connect service to establish a connection to the cluster's API server. This is the same infrastructure used to display registered GKE clusters in the Google Cloud console. Authentication. Google IDs are the default authentication credentials used by Connect Gateway, but you can also use third-party identity providers through Workforce Identity Federation and group-based authentication through GKE Identity Service. Authorization. Authorization is consistent across all clusters registered in a fleet. And Connect Gateway uses individual IDs or group memberships for efficient policy management. Simplified access. Connect Gateway provides a streamlined method for connecting to clusters using command line tools like kubectl, Client Go, and DevOps automation pipelines. Google groups support. Connect Gateway can be configured to use Google groups membership information for user authorization, streamlining access management for teams. Third-party identity support. Connect Gateway can leverage third-party identities like Azure Active Directory and Okta for authorization through Workforce Identity Federation.

2. Let's practice!

Create Your Free Account

or

By continuing, you accept our Terms of Use, our Privacy Policy and that your data is stored in the USA.