Managing allowed IP addresses for Kubernetes products

Restricting IPs on Kubernetes Kapsule or Kosmos clusters enhances security by limiting access to only trusted sources. Since only IP addresses and networks specified by you can interact with your clusters, you reduce the risk of unauthorized access and potential attacks.

The default entry 0.0.0.0/0 enables any host to establish a connection.

Before you start

To complete the actions presented below, you must have:

• A Scaleway account logged into the Scaleway console
• Owner status or IAM permissions allowing actions in the intended Organization
• Created a Kubernetes Kapsule or Kosmos cluster

How to add an IP address

1. Click Kubernetes in the Containers section of the Scaleway console. The Kubernetes dashboard appears.
2. Select the cluster you wish to configure. The Cluster information page opens.
3. Click the Network tab to display your cluster’s network information. Your access control list appears in the Allowed IPs for control plane section.
4. Click Add allowed IP. Enter the IP address or IP block in CIDR notation (e.g., 198.51.100.135/32 for a single IP, 198.51.100.0/24 for an IP block), then click Add IP(s).
   Note

   To restore default settings and allow connections from all IPs, add 0.0.0.0/0 to the list.

How to delete an IP address

1. Click Kubernetes in the Containers section of the Scaleway console. The Kubernetes dashboard appears.
2. Select the cluster you wish to configure. The Cluster information page opens.
3. Click the Network tab to display your cluster’s network information. Your access control list appears in the Allowed IPs for control plane section.
4. Locate the IP address in your allowed list.
5. Click «Delete Icon» next to the IP you want to delete. Confirm by typing DELETE in the pop-up, then click Delete allowed IP to confirm deletion.