How to send requests between servers in Private Network in GCP?

Question

The use case is the following:

• a Compute Engine instance with a private IP only ( no external IP)
• The project has policies to not create external IPs
• The goal is to be able to send HTTP requests to the Private Compute Engine Instance from Cloud Build

What are the best practices in Networking to ensure that communication?

Thank you

Answer 1

For now, you can't plug Cloud Build in your VPC and thus connect private resources from there.

A new feature is coming and named Worker Pool. The principle is to provision Compute Engine instances in your project, and thus in your VPC to run Cloud Build pipeline. Because the pipeline will run in your VM in your VPC, you will be able to reach the private IPs of your VPC.

Answer 2

Have you explored Private Google Access? It allows resources that do not have external IP to access Google's APIs and Services. Private Google Access is enabled on a subnet by subnet basis.

https://cloud.google.com/vpc/docs/private-access-options