If I close a droplet to public access entirely (ie: production db server) and only allow VPC IP range, the Console Access stops working.
I learned the DO Control Panel works on k8s. Either you can assign a VPC range to it and share with us to add firewall or that range can be in the firewall rules by default.