By rafalkawecki
The kubectl cluster-info returns URL where the Kubernetes control plane is running at. None of my droplets / load balancers have the public IP address returned by nslookup of that URL.
My questions are:
- What is exactly running at the URL (some special service managed by DO that forwards the requests to the cluster) ?
- Is it possible to apply firewall rules so kubectl can be executed only from a specific IP address (VPN) ? I saw worker-node-firewalls but I think the public firewall only accepts / drops packets to the nodes.
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Start building today
From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.
