I was wondering if anyone else has come across this problem, and if so, what solution was chosen.
We currently use GCP Uptime Checks for our internet facing endpoints - however, we do want to also use them to check non-internet facing endpoints (i.e locked down by a security group for example).
Already considered:
- Whitelist the GCP Uptime IPs - this was dismissed as we do not want to maintain a mass amount of IPs on our security groups - which may or may not change over time.
- Use GCPs new Private Uptime Checks - this only supports checking endpoints residing in GCP (we need to also check private endpoints in AWS)
- Set up a reverse NGINX Proxy VM - which we can lock down to GCP Uptime IPs (in one place, as opposed to multiple) - our services can then just whitelist the Proxy VM
- Try and achieve the same logic using the NGINX Ingress Controller in GKE
Has anyone else faced this problem?
Thanks in advance!