<p>I have k8s cluster deployed over aws.
I created load balancer service with annotation of : 
service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
now, I saw that k8s created new elb attached to a sg with outbound role 443 opened to 0.0.0.0/0.
I tried to take a look and see if there's additional annotation that manage source ip's (pre defined ip's instead the 0.0.0.0) and couldn't find.
Do you know if there's kind of option to manage this as part of annotations ?</p>

Roee Rakovsky
<p>Make use of <code>loadBalancerSourceRanges</code> in loadbalancer service resource as described <a href="https://kubernetes.io/docs/tasks/access-application-cluster/configure-cloud-provider-firewall/#restrict-access-for-loadbalancer-service" rel="nofollow noreferrer">here</a>.</p>

<pre><code>apiVersion: v1
kind: Service
metadata:
  name: myapp
spec:
  ports:
  - port: 8765
    targetPort: 9376
  selector:
    app: example
  type: LoadBalancer
  loadBalancerSourceRanges:
  - 10.0.0.0/8
</code></pre>

<p><strong>Update:</strong></p>

<p>In case of nginx-ingress you can use <code>nginx.ingress.kubernetes.io/whitelist-source-range</code> annotation.</p>

<p>For more info check <a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/#whitelist-source-range" rel="nofollow noreferrer">this</a>.</p>
