<p>We have our pods running in GKE private cluster with NO global control plane access. We have one bastion host which is used to connect to this private cluster and kubectl apis can be accessed from there.</p>
<p>user --&gt; bastion (kubectl and authorised to use cluster) --&gt;GKE private cluster</p>
<p>One issue in this architecture is, we need to port-forward to the app pods in the private cluster, however as the bastion host is different than our localhost (VM where browser), we can not access the apps with port-forward. For the same reason, forwarding is not working from Gcloud shell as well.</p>
<p>Do we have any suggestions from GKE for port-forwarding use cases in private cluster paradigm. We do not want to provision RDP instance and add that to authorised network just for port forwarding use case.</p>
<p>we have refereed to the doc , but did not get info on this.</p>
<p><a href="https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters" rel="nofollow noreferrer">https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters</a></p>

saurabh umathe
<p>When you are doing port forwarding on <strong>GCP console</strong> you can do the web preview port-forward there also.</p>
<p>Use the <strong>web preview</strong> option when you are trying the port-forwarding from the console.</p>
<p>It will redirect you to a web preview and show you output on port that you are forwarding.</p>
<p><a href="https://i.stack.imgur.com/qSj2e.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/qSj2e.png" alt="enter image description here" /></a></p>
<p>Read more at : <a href="https://cloud.google.com/shell/docs/using-web-preview" rel="nofollow noreferrer">https://cloud.google.com/shell/docs/using-web-preview</a></p>
