<p>right now i'm accessing my pods (postgres port 5432) trough a service that is  exposed, but since <strong>gcloud</strong> charge for every forwarding rule created, the amount of pods i need to monitor or to execute stuff in it, is costing me more and more, is there a way to create a single expose service for all of my pods? or can i create some sort of <code>vpn</code>? <code>putty tunnel</code> or something? any help would be appreciated!
I'm also using 
kubectl exec</p>

<p>If you are looking for a managed solution then Google is offering VPN for that:
<a href="https://console.cloud.google.com/networking/vpn/" rel="nofollow noreferrer">https://console.cloud.google.com/networking/vpn/</a></p>

<p>If you are happy to roll your own then you can create a new Compute instance on the same network where your nodes are and set up openvpn there. This will give you a fix ip as a freebie.</p>

<p>A more advanced solution is if you run openvpn as a pod (or pods) and use a Service with NodePort to expose it. (Optionally manually create a single loadbalacer on google cloud to get a static ip for that.)</p>

<p>At the end of the day the ideal solution depends much on your environment and goal.</p>
