K8S MySQL Traefik IP Whitelist

From my old post, I created Traefik and MySQL in K8S. This post will use Traefik to route MySQL to outside world and allow IP Whitelist only.

Traefik

Argo CD, Traefik, Let’s Encrypt on GCP Part 2

MySQL

K8S MySQL Statefulsets

My Repo

traefik · main · art Krisada / argocd-test · GitLab

From My Repo, You can see file 05-traefik.yml. Add entrypoint and port in traefik deployment.

05-traefik.yml

Add port in traefik-service. And add externalTrafficPolicy: Local (for display external IP in traefik)

https://gitlab.com/krisadas/argocd-test/-/blob/main/traefik/04-traefik-service.yml

Using Source IP

Add IngressRouteTCP with middleware IP Whitelist.

https://gitlab.com/krisadas/argocd-test/-/blob/main/mysql/ingress-route-tcp.yml

Add MiddlewareTCP IP Whitelist.

https://gitlab.com/krisadas/argocd-test/-/blob/main/mysql/ip-whitelist.yml

Change IP to your IP and try connect MySQL from outside. Hope this help.