I\'m running a Google Kubernetes Engine with the \"private-cluster\" option. I\'ve also defined \"authorized Master Network\" to be able to remotely access the environment -
We ended up doing the following:
1) Remove the deployment step from cloudbuild.yaml
2) Install Keel inside the private cluster and give it pub/sub editor privileges in the cloud builder / registry project
Keel will monitor changes in images and deploy them automatically based on your settings.
This has worked out great as now we get pushed sha hashed image updates, without adding vms or doing any kind of bastion/ssh host.