/projects/cloud-sandbox
← Back to projects

Cloud Sandbox

active

March 2025

Shell GCP GKE IAP
cloud gcp kubernetes platform-engineering

A CLI utility for creating sandbox VMs to easily access private GKE clusters. Born from real-world operational challenges managing Kubernetes clusters that aren't exposed to the public internet.

What It Does

The gke-sandbox.sh script handles the full lifecycle of sandbox VMs — creation, enumeration, and deletion — for accessing private GKE clusters that require administrative access through a bastion-style workflow.

Features

  • Pre-configured environment — VMs come with kubectl, helm, jq, and networking pre-configured for API server connectivity
  • Secure access — Uses Identity-Aware Proxy (IAP) tunneling instead of direct exposure
  • Customizable setup — Startup scripts allow configuration of bundled tools and environment parameters
  • Self-service — Users can independently manage VM lifecycle without manual intervention