0

have a java app on a Kubernetes cluster on IBM cloud that needs to make an outbound SOAP call to a third party vendor's app. This vendor's servers are protected by an IP whitelist. No matter what I do, I can't seem to find the correct IP for them to whitelist. I know this because even though I can hit google, or yahoo, whenever I try to connect to the vendor's URL, the connection times out.

  • I curled https://api.ipify.org and gave the IP to the the vendor. The issue is, when the app is redeployed, the IP changes. This is not a feasible solution for an app that is redeployed multiple times a day.
  • I have set up a public Network Node Balancer and given the public IP of the NLB to the vendor. Didn't work.
  • I have whitelisted the public IPs of the machines the cluster is running on. No change.

As far as I can tell, the the cluster is behind a NAT, and is connected to a VLAN. How can I find the right IP for them to whitelist?

Chiyoung Lii
  • 11
  • 3

2 Answers2

1

I'm not familiar with IBM cloud and how they do IP addressing, but if similar to say, Azure or AWS, your outbound IP address could be from multiple IP addresses. In Azure, this is clear on the service you are using by looking at properties. There it will list all the possible outbound IP addresses. I'd assume something similar is on IBM Cloud, or they should be able to provide that info if it isn't.

DubStep
  • 270
  • 2
  • 9
1

After several days of back and forth with the IBM cloud support this is the answer that they gave me that works.

  1. Get the IP's of your worker nodes kubectl get nodes -o wide
  2. List all subnet in your IBM Cloud account ibmcloud sl subnet list |grep ADDITIONAL_PRIMARY|grep PUBLIC
  3. Now match the worker IPs to the subnet address you got in 2nd command and get it details ibmcloud sl subnet detail from this detail, note down the value against 'identifier' and you can provide this identifier to be whitelisted at vendor's end.
Chiyoung Lii
  • 11
  • 3