service.beta.kubernetes.io/coreweave-load-balancer-type: public annotation on your LoadBalancer Service. This annotation is what requests an internet-facing public IP. Without it, the Service receives a non-public address from the default pool and isn’t reachable from the public Internet. The public IP is allocated from CoreWeave’s public LoadBalancer address pool for the region and remains stable for the lifetime of the Service. This pool is separate from the NAT egress ranges for the Availability Zone, which govern only outbound traffic.
The service.beta.kubernetes.io/external-hostname annotation publishes a DNS record to public DNS, so the hostname resolves from anywhere. On a non-public Service, that record points to the Service’s private (RFC1918) address. You can reach this address from within the cluster, over a connected virtual private cloud (VPC), or through Direct Connect. It isn’t reachable from the public Internet.
For full details, see Expose a Service.
To limit which clients can connect, see How do I restrict which IPs can reach my LoadBalancer Service?.
Administrator