Restrict access to Kubernetes API Server endpoints | Voters

DigitalOcean

Create

Home

Kubernetes

Restrict access to Kubernetes API Server endpoints

Matthew Kuntz

For security reasons, it would be nice to restrict access to the managed Kubernetes control plane API, either via Firewall configuration or basic IP Whitelisting like Managed Databases. 
Similar to the feature in EKS
https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html

October 11, 2021

João Lourenco

For us this is must have, block all and any access to the k8s nodes and control plane except if it's being reached by Cloudflare's IP's to make sure it's all being routed through them.