DIgitalOcean Kubernetes service: NodePort

Hi, DigitalOcean community!

I need to expose service on each worker node. I have a running pod, which is listening on 443 port. Please, take a look at the service manifest:

kind: Service
apiVersion: v1
metadata:
  name: relay-service
  namespace: {{.Values.global.namespace_prefix}}{{.Values.global.s3sync.namespace}}
  labels:
    app: {{ .Chart.Name }}
    chart: {{ .Chart.Name }}-{{ .Chart.Version }}
    release: {{ .Release.Name }}
    heritage: {{ .Release.Service }}
spec:
  type: NodePort
  selector:
    name: {{ .Chart.Name }}

  ports:
    - name: tcp
      port: 443
      targetPort: 443
      protocol: TCP

Service has been successfully created:

Olegs-MacBook-Pro:helm mukolaich$ kubectl get svc --all-namespaces --kubeconfig=../frakubeconfig
NAMESPACE     NAME                  TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)                  AGE
default      relay-service   NodePort    10.245.249.99   <none>        443:32168/TCP            19h

Here is more detailed service data:

Olegs-MacBook-Pro:helm mukolaich$ kubectl describe svc sling-relay-service --kubeconfig=../frakubeconfig
Name:                     relay-service
Namespace:                default
Labels:                   app=s3sync
                          chart=s3sync-1.0.0
                          heritage=Helm
                          release=relay
Annotations:              <none>
Selector:                 name=s3sync
Type:                     NodePort
IP:                       10.245.249.99
Port:                     tcp  443/TCP
TargetPort:               443/TCP
NodePort:                 tcp  32168/TCP
Endpoints:                10.244.0.18:443,10.244.0.217:443
Session Affinity:         None
External Traffic Policy:  Cluster
Events:                   <none>

And unfortunately, I can access it using external worker IPs. From my point of view, it must work with the current approach (following basic Kubernetes principles).

I’ve opened the attached firewall to the Kubernetes as well.

Could someone point me in the right direction why it isn’t working?

Thanks, Oleg