expose cluster to outside on cloud

Question

I was thinking to expose each service through cluster IP and have them whitelist all of them

Answer 1

Based on the comments.

The solution was to use NAT gateway IP for whitelisting. The IP is static and also does not allow incoming connections from internet. Only outgoing Internet connections are allowed through NAT gateway.