A bastion host is the only host permitted to be directly addressed via SSH from the internet.
There’s the way it works out of the box and then there’s the fancy way, which is recommended.
The best way is with Teleport.
There are a few recommended approaches. We recommend to always use a bastion.
Make sure that your GitHub SSH public key has been added to your geodesic ssh-agent
Learn how to connect via SSH to kops cluster.