From aaff7d05375285aa68760a56f97d065c15fbda65 Mon Sep 17 00:00:00 2001
From: Paul Larson <pwlars@gmail.com>
Date: Tue, 3 Oct 2023 10:12:16 -0500
Subject: [PATCH] Add terraform support for specifying a source range to allow
 (#45)

---
 terraform/test-observer.tf | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/terraform/test-observer.tf b/terraform/test-observer.tf
index da80f369..ac39f2be 100644
--- a/terraform/test-observer.tf
+++ b/terraform/test-observer.tf
@@ -25,6 +25,12 @@ variable "external_ingress_hostname" {
   default     = "canonical.com"
 }
 
+variable "nginx_ingress_integrator_charm_whitelist_source_range" {
+  description = "Allowed client IP source ranges. The value is a comma separated list of CIDRs."
+  type        = string
+  default     = ""
+}
+
 locals {
   sentry_dsn_map = {
     production  = "https://dd931d36e0c24681aaeed6abd312c896@sentry.is.canonical.com//66"
@@ -49,6 +55,7 @@ resource "juju_application" "ingress" {
 
   config = {
     tls-secret-name = var.tls_secret_name
+    whitelist-source-range = var.nginx_ingress_integrator_charm_whitelist_source_range
   }
 }