I have a Kubernetes cluster running on the Google Cloud Platform. Port 443 is exposed through an Ingress controller. I am trying to use the VPC firewall rules to block access from anything other than a Cloudflare IP. I have the following rules setup (I know they are disabled right now)
As far as I know this should work, but they don't seem to block anything. Looking at the rules, they are applying to the correct nodes.
Only when applying the 'allow-no-one' rule to all ports does it actually do anything (but I think it breaks the internal communication in the cluster)
Does anyone have a clue why this does not work?