Restrict access to OpenShift routes by IP address

Page content

In this post I will show you how can restrict access to the routes by source IP address.

Parst of the Openshift series

Restricting access to a route

After creating and exposing a route, you can add an annotation to the route specifying the IP address(es) that you would like to whitelist. Whitelisting a IP address automatically blacklists everything else.

oc annotate route test-route haproxy.router.openshift.io/ip_whitelist=192.168.0.0/24

To allow several IP addresses through to the route, separate each IP with a space:

oc annotate route test-route haproxy.router.openshift.io/ip_whitelist=192.168.1.10 180.5.61.153 192.168.1.0/24 192.168.0.0/24

To delete the IPs from the annotation, you can run the command:

oc annotate route test-route haproxy.router.openshift.io/ip_whitelist-
comments powered by Disqus