I know how to create the service abstraction that points to an endpoint to an external database(not within the cluster ip). However, my mysql service (single host mysql) only permits fix ip for access. The obvious reason is security.

So, how can one fix this?

  kind: "Service"
  apiVersion: "v1"
  metadata:
    name: "example-external-service"
  spec:
    ports:
      -
        name: "mysql"
        protocol: "TCP"
        port: 3306
        targetPort: 3306
        nodePort: 0

end point defintion:

kind: "Endpoints"
apiVersion: "v1"
metadata:
  name: "example-external-service" 
subsets: 
- addresses:
  - ip: "10.10.1.1"
  ports:
  - name: "mysql"
    port: 3306