<p>I need to lock down access to service running in Google Cloud Kubernetes. What I can do is use "loadBalancerSourceRanges" in service deployment with TCP load balancer to restrict networks that can access service say on port 443.</p>

<p>What I don't seem to be able to do is lock down ICMP traffic from internet hitting load balancer. This is security compliance requirement I have.</p>

<p>Google documentation and bug tracker seem to indicate that this is not possible. Am I correct and what is best alternative?</p>

<p>If you go to VPC Network -> Firewall Rules -> Create firewall rule and select the targets as "All instances in the network" and block all ICMP requests you may be able to accomplish this (not tested).</p>
