mpute firewall-rules list --filter=&#34;name~gke-${CLUSTER_NAME}-[0-9a-z]*-master&#34;</code></pre><p>替换当前的防火墙规则以允许 Master 访问：</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ gcloud compute firewall-rules update &lt;firewall-rule-name&gt; --allow tcp:10250,tcp:443,tcp:15017</code></pre></div></aside></div></li><li><p>为 <code>kubectl</code> 获取认证凭据。</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ gcloud contain