Service Discovery -> Ingresses
Select Add annotations
To allow only the RUG IP or range to the deployment you can use the folowing annotation :