With OVN provider it's not possible to use allow_cidrs of the load balancer to implement loadBalancerSourceRanges option of Services as it's ignored. Instead SGs should be used. This ticket is about making sure that manage-security-groups option will also make sure to take into account the loadBalancerSourceRanges when opening the nodePort on the nodes SG.