caddyserver / ingress

WIP Caddy 2 ingress controller for Kubernetes
Apache License 2.0
660 stars 70 forks source link

Add whitelist-source-range (or better allowlist-source-range) annotation #112

Open sebastian-philipp opened 1 year ago

sebastian-philipp commented 1 year ago

Hi everyone,

The nginx ingress supports a whitelist-source-range annotations, which is interesting for exposing internal services only to some source IPs: nginx.ingress.kubernetes.io/whitelist-source-range.

Would be great to have this as well. I imagine we need to somehow codify it into the generated reverse proxy configuration.

See also https://stackoverflow.com/questions/66942651/how-to-expose-internal-services-in-kuberenetes-via-ingress-controller

Researching a bit more, alternatively we could also use something like authentication, but this also is not supported here.