Thank you for answer! Yes indeed I use NodePorts for external load balancer, and there is need to restrict access to kube-proxy ports and NodePorts as well.
What type is the service? You are probably using load balancer or nodeport. > Right? > > In that case, just change them to cluster IP. > > Also, see here for services types: > https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services---service-types > > And don't hesitate to ask if it doesn't do the trick or something :) > > > -- You received this message because you are subscribed to the Google Groups "Kubernetes user discussion and Q&A" group. To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-users+unsubscr...@googlegroups.com. To post to this group, send email to kubernetes-users@googlegroups.com. Visit this group at https://groups.google.com/group/kubernetes-users. For more options, visit https://groups.google.com/d/optout.