Add terraform support for specifying a source range to allow (#45)

canonical · Oct 3, 2023 · aaff7d0 · aaff7d0
1 parent a09d342
commit aaff7d0
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/terraform/test-observer.tf b/terraform/test-observer.tf
@@ -25,6 +25,12 @@ variable "external_ingress_hostname" {
   default     = "canonical.com"
 }
 
+variable "nginx_ingress_integrator_charm_whitelist_source_range" {
+  description = "Allowed client IP source ranges. The value is a comma separated list of CIDRs."
+  type        = string
+  default     = ""
+}
+
 locals {
   sentry_dsn_map = {
     production  = "https://[email protected]//66"
@@ -49,6 +55,7 @@ resource "juju_application" "ingress" {
 
   config = {
     tls-secret-name = var.tls_secret_name
+    whitelist-source-range = var.nginx_ingress_integrator_charm_whitelist_source_range
   }
 }