Merge pull request #110 from canonical/tofu-ingress-allow-source-rang…

…e-var Add terraform support for specifying a source range to allow
canonical · Oct 3, 2023 · ee6fd62 · ee6fd62
2 parents cc8cea5 + 44ed548
commit ee6fd62
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/terraform/main.tf b/terraform/main.tf
@@ -27,6 +27,7 @@ resource "juju_application" "ingress" {
 
   config = {
     tls-secret-name = var.tls_secret_name
+    whitelist-source-range = var.nginx_ingress_integrator_charm_whitelist_source_range
   }
 }
 

diff --git a/terraform/variables.tf b/terraform/variables.tf
@@ -17,6 +17,12 @@ variable "db_offer" {
   type        = string
 }
 
+variable "nginx_ingress_integrator_charm_whitelist_source_range" {
+  description = "Allowed client IP source ranges. The value is a comma separated list of CIDRs."
+  type        = string
+  default     = ""
+}
+
 locals {
   app_model = "testflinger-${var.environment}"
 }