Merge pull request #1121 from k8s-infra-cherrypick-robot/cherry-pick-…

…1109-to-release-1.23

[release-1.23] Fix: enable public access if sourceRange is specified when lb is in internal mode

pkg/provider/azure_loadbalancer.go

@@ -2194,7 +2194,7 @@ func (az *Cloud) reconcileSecurityGroup(clusterName string, service *v1.Service,
 
 	var sourceAddressPrefixes []string
 	if (sourceRanges == nil || servicehelpers.IsAllowAll(sourceRanges)) && len(serviceTags) == 0 {
-		if !requiresInternalLoadBalancer(service) {
+		if !requiresInternalLoadBalancer(service) || len(service.Spec.LoadBalancerSourceRanges) > 0 {
 			sourceAddressPrefixes = []string{"Internet"}
 		}
 	} else {