kubernetes - AKS：IP 白名单（入口）

Question

我正在尝试将 AKS 中入口的 IP 列入白名单。我目前使用的是ingress-nginx未随 Helm 安装的。

可以在这里找到强制性的 kubernetes 资源

服务启动如下：

spec:
  externalTrafficPolicy: Local

完整的 yaml在这里

我的入口定义是：

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: example-ingress
  # namespace: ingress-nginx
  annotations:
    ingress.kubernetes.io/rewrite-target: /
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
    nginx.ingress.kubernetes.io/whitelist-source-range: "xxx.xxx.xxx.xxx"
spec:
  rules:
  - http:
      paths:
      - path: /xx-xx
        backend:
          serviceName: xx-xx
          servicePort: 8080
      - path: /xx
        backend:
          serviceName: /xx
          servicePort: 5432

不强制执行 IP 白名单。难道我做错了什么 ？

标签： kubernetesazure-aks

Answer 1

After a lot of digging around I found that the problem is because of this bug in NATing, defined here and there is quick medium read here.

Hope this solves problems for future readers or help track the bug