Could you confirm you also followed the instructions here to configure the firewall?
Just to ensure I understood you correctly, you are able to access the same Elasticsearch machine (also via the same IP address) from your machine, but not from the k8s nodes, right? Could it be possible that the firewall is configured only for your network address, but not for the nodes' network? This would be the
Source filter option of the firewall rule.