I have a kubernetes cluster where projects from many customers are running. Each customer has its own namespace. Projects are managed. This means customers have no access to the cluster.

Each project is implemented on a PHP + MySQL stack.

I'm using Calico as networking provider for the cluster.

I want to provide some customers with a external VPS with ssh access (a pure VPS, not a part of the kubernetes cluster). This VPS should be allowed to connect with the services (MySQL) on the customer namespace (onl.

Is it possible to achieve something like this by using Calico or by any other mean?