Hello everyone!

I'm trying to whitelist an IP to access a deployment inside my Kubernetes 
cluster. (Restrict all traffic but the whitlisted IP's)

I looked for some documentation online about this, but I only found the

ingress.kubernetes.io/whitelist-source-range

for ingress to grant access to certain IP range. (I think it's only for NGINX 
version...) 

But still, I couldn't manage to isolate the deployment.

Here is the ingress configuration YAML file:

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ingress-internal
  annotations:
    kubernetes.io/ingress.class: "istio"
    ingress.kubernetes.io/whitelist-source-range: "xxx.xx.xx.0/24, 
xx.xxx.xx.0/24"
spec:
  rules:
  - host: white.example.com
    http:
      paths:
      - backend:
          serviceName: white
          servicePort: 80

I can access the deployment from my whitelisted IP and from the mobile phone 
(different IP not whitelisted in the config)

Has anyone stepped in the same/similar problem using ingress and Istio?

Any help, hint, docs or alternative configuration will be much appreciated.

-- 
You received this message because you are subscribed to the Google Groups 
"Kubernetes user discussion and Q&A" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to kubernetes-users+unsubscr...@googlegroups.com.
To post to this group, send email to kubernetes-users@googlegroups.com.
Visit this group at https://groups.google.com/group/kubernetes-users.
For more options, visit https://groups.google.com/d/optout.

Reply via email to