When using spec.loadBalancerSourceRanges, IPv6 CIDRs ending in /32 are stripped to bare IPv6 addresses in the generated Scaleway Load Balancer ACLs.
In my case, the Cloudflare IP range 2400:cb00::/32 becomes 2400:cb00:: in the Scaleway Load Balancer ACL.
This results in overly restrictive ACLs and prevents Cloudflare from reaching the origin over IPv6.
This seems to come from strip32SubnetMasks being applied without distinguishing IPv4 and IPv6. IPv6 /32 ranges should be preserved.