When the Secure Agent creates an advanced cluster on Google Cloud, the cluster nodes need access to certain domains to fetch artifacts, such as machine images, and to access sources and targets.
Add the following domains to the outbound allowlist of your firewall: