From 44ed5480bfa1c334f7d0d78ee8a683179aeed43a Mon Sep 17 00:00:00 2001
From: Paul Larson <paul.larson@canonical.com>
Date: Mon, 2 Oct 2023 13:59:06 -0500
Subject: [PATCH] Add terraform support for specifying a source range to allow

---
 terraform/main.tf      | 1 +
 terraform/variables.tf | 6 ++++++
 2 files changed, 7 insertions(+)

diff --git a/terraform/main.tf b/terraform/main.tf
index 6149fce5..9c98069b 100644
--- a/terraform/main.tf
+++ b/terraform/main.tf
@@ -27,6 +27,7 @@ resource "juju_application" "ingress" {
 
   config = {
     tls-secret-name = var.tls_secret_name
+    whitelist-source-range = var.nginx_ingress_integrator_charm_whitelist_source_range
   }
 }
 
diff --git a/terraform/variables.tf b/terraform/variables.tf
index 71f00d69..60da2c24 100644
--- a/terraform/variables.tf
+++ b/terraform/variables.tf
@@ -17,6 +17,12 @@ variable "db_offer" {
   type        = string
 }
 
+variable "nginx_ingress_integrator_charm_whitelist_source_range" {
+  description = "Allowed client IP source ranges. The value is a comma separated list of CIDRs."
+  type        = string
+  default     = ""
+}
+
 locals {
   app_model = "testflinger-${var.environment}"
 }