Closed collimarco closed 6 months ago
It works now, I had to remove the IPv6 ranges because they are not supported by DO Load Balancer. In any case you are always connecting to them with IPv4, so removing IPv6 from firewall shouldn't be a problem.
That was the root cause of this issue.
We have added this annotation to a DO Kubernetes Load Balancer:
https://github.com/digitalocean/digitalocean-cloud-controller-manager/blob/master/docs/controllers/services/annotations.md#servicebetakubernetesiodo-loadbalancer-allow-rules
The other annotations work properly, but the rule
service.beta.kubernetes.io/do-loadbalancer-allow-rules
doesn't have any effects.We set it to:
Basically it should allow only Cloudflare IPs (https://www.cloudflare.com/ips/), but it doesn't work. We can still connect to the DO Kubernetes Load Balancer from other IPs.