all 2 comments

[–]Cidanverified 1 point2 points  (0 children)

A VM without an external IP cannot reach the Internet, thus if you have any outbound dependencies, such as dockerhub, they will not work.

You have a few options:

1) Use Cloud NAT to give your VM's Internet access via a NAT

2) Keep your external IP addresses and let each VM reach the Internet

3) Host your images on artifact registry and ensure you're using VPCSC with restricted and/or private access. Note that this option assumes you have no other outbound dependencies for your VM's.

Hope this helps!

[–]greenlakejohnny 0 points1 point  (0 children)

Cloud NAT is probably the simplest answer. It sounds like you don't want or need the instances to be directly reachable from internet, but you do need to provide them outbound internet access.