Currently, allowing specific GAE services is not supported. I was able to find an open Feature Request <https://issuetracker.google.com/128466458> for this. I recommend starring the issue link to receive email updates.
Allowing app deployment requests is not currently available for flex. Please see these workarounds <https://stackoverflow.com/questions/54442545/how-to-properly-configure-vpc-firewall-for-app-engine-instances> posted on Stackoverflow by a member of Google Cloud Support for alternative solutions. Regarding cron and task queues, as you mentioned, these don't need specific rules as they are allowed even when the default rule is set to deny. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/67775076-f4d5-4b19-a5f9-8950da02c384%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
