Secure Kubernetes Services in a Google Kubernetes Engine Cluster

To secure north-south traffic for a Google Kubernetes Engine cluster (GKE), deploy the VM-Series firewalls in an instance group and configure the GCP plugin on Panorama to learn the internet-facing services.
The Google Cloud Platform plugin for Panorama enables Panorama to secure containerized applications in a Google Kubernetes Engine (GKE) cluster. The plugin obtains application-specific information from Kubernetes and relays it to one or more VM-Series firewalls protecting the cluster.

Related Documentation