i have a django application running as an App engine this is a service i only want people to access through my vpn so i made some firewall rules to my app

Deny *
Allow 0.1.0.1
Allow 0.1.0.2
Allow 0.1.0.2/32
Allow (ip of Compute engine running vpn service)

but now i have to run some code daily what i first did was, just using the Cloud scheduler to make the calls to the endpoints of my app engine which worked fine! until the call got too long and timed out after 10 minutes.

i then read about Cloud tasks and figured out i had to make a Push queue so that i did.

i now have 1 cron job in the cloud scheduler calling an endpoint daily which then add stuff (that is split up into smaller portions) to the push queue.

here comes the problem….

my Push queue is now filed with a lot of tasks each task tries to go to an endpoint on the App engine to do its part of the job but gets a status: “PERMISSION_DENIED”.

i tried removing the firewall rule (Deny *) and it seems to work that way. I cant seem to find any way to allow the Push queue to access the app engine and the service is not something i want to be public