+1 - I'm also curious on this! Whitelisting by IP is my final step in moving across to Kubernetes, although the documentation for this does seem to be lacking (using Istio).
Any help appreciated. Thanks, Gary On Wednesday, 20 September 2017 15:32:12 UTC+1, jordi.esc...@gmail.com wrote: > > Hello everyone! > > I'm trying to whitelist an IP to access a deployment inside my Kubernetes > cluster. (Restrict all traffic but the whitlisted IP's) > > I looked for some documentation online about this, but I only found the > > ingress.kubernetes.io/whitelist-source-range > > for ingress to grant access to certain IP range. (I think it's only for > NGINX version...) > > But still, I couldn't manage to isolate the deployment. > > Here is the ingress configuration YAML file: > > apiVersion: extensions/v1beta1 > kind: Ingress > metadata: > name: ingress-internal > annotations: > kubernetes.io/ingress.class: "istio" > ingress.kubernetes.io/whitelist-source-range: "xxx.xx.xx.0/24, > xx.xxx.xx.0/24" > spec: > rules: > - host: white.example.com > http: > paths: > - backend: > serviceName: white > servicePort: 80 > > I can access the deployment from my whitelisted IP and from the mobile > phone (different IP not whitelisted in the config) > > Has anyone stepped in the same/similar problem using ingress and Istio? > > Any help, hint, docs or alternative configuration will be much appreciated. > > -- You received this message because you are subscribed to the Google Groups "Kubernetes user discussion and Q&A" group. To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-users+unsubscr...@googlegroups.com. To post to this group, send email to kubernetes-users@googlegroups.com. Visit this group at https://groups.google.com/group/kubernetes-users. For more options, visit https://groups.google.com/d/optout.
