Managing allowed IP addresses for Kubernetes products

Restricting IPs on Kubernetes Kapsule or Kosmos clusters enhances security by limiting access to only trusted sources. Since only IP addresses and networks specified by you can interact with your clusters, you reduce the risk of unauthorized access and potential attacks.

The default entry 0.0.0.0/0 enables any host to establish a connection.

Before you startLink to this anchor

To complete the actions presented below, you must have:

• A Scaleway account logged into theScaleway console
• Owner status orIAM permissions allowing actions in the intended Organization
• Created a Kubernetes Kapsule or Kosmos cluster

How to add an IP addressLink to this anchor

1. Click Kubernetes in the Containers section of theScaleway console. The Kubernetes dasard appears.
2. From the drop-down menu, select the geographical region you want to manage.
3. Select the cluster you wish to configure. The Cluster information page opens.
4. Click the Network tab to display your cluster’s network information. Your access control list appears in the Allowed IPs for control plane section.
5. Click Add allowed IP. Enter the IP address or IP block inCIDR notation (e.g., 198.51.100.135/32 for a single IP, 198.51.100.0/24 for an IP block), then click Add IP(s).
   Note

   To restore default settings and allow connections from all IPs, add 0.0.0.0/0 to the list.

How to delete an IP addressLink to this anchor

1. Click Kubernetes in the Containers section of theScaleway console. The Kubernetes dasard appears.
2. From the drop-down menu, select the geographical region you want to manage.
3. Select the cluster you wish to configure. The Cluster information page opens.
4. Click the Network tab to display your cluster’s network information. Your access control list appears in the Allowed IPs for control plane section.
5. Locate the IP address in your allowed list.
6. Click «Delete Icon»next to the IP you want to delete. Confirm by typing DELETE in the pop-up, then click Delete allowed IP to confirm deletion.