Restrict access to Kubernetes API Server endpoints | Voters

Restrict access to Kubernetes API Server endpoints

Matthew Kuntz

For security reasons, it would be nice to restrict access to the managed Kubernetes control plane API, either via Firewall configuration or basic IP Whitelisting like Managed Databases. 
Similar to the feature in EKS
https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html

October 11, 2021

James Dogopoulos

-- also, add the ability to restrict which source IPs can make requests to the entire DO API.

João Lourenco

For us this is must have, block all and any access to the k8s nodes and control plane except if it's being reached by Cloudflare's IP's to make sure it's all being routed through them.