IssueTracker

This will create a feature request which anybody can view and comment on.

Please describe your requested enhancement. Good feature requests will solve common problems or enable new use cases.

Sample use cases:

1. There are some cases where the company applies business rules, such as firewalls being set to close all connections to port 22 within the customer's project. Some customers suggests to use IAP to connect instead, since this is what they use to connect to their regular GCE VMs. That's how it gets to the point of trying to SSH to the Flex VM using IAP.

2. Investigate issues with occasional long response times of services. The purpose is to perform thread dump or create and download heap dump. Security policy only allows SSH access production instances via IAP.

3. Configuring VPC firewall to allow SSH connections on port 22 is working fine for GCE instances. However it's not working for GAE Flex.

What you would like to accomplish:

1. To be able to SSH to GAE Flex instance using IAP.

How this might work:

No workaround as of now.

If applicable, reasons why alternative solutions are not sufficient:


Other information (workarounds you have tried, documentation consulted, etc):

Similar case posted in Stackoverflow: https://stackoverflow.com/questions/69138716/is-it-not-possible-to-tunnel-ssh-to-app-engine-instance-through-iap