Anybody standing up private cluster in GKE and coming up with a good workflow for access to the masters?

I don’t have an answer but I am currently working my way through standing up a new infra with CD. This has been the more complete example that I’m attempting to use as a starting point https://github.com/pulumi/kubernetes-the-prod-way/blob/master/docs/02-identity.md