Enable whitelisting for gateway service (#7)

giantswarm · Nov 18, 2019 · 26166d5 · 26166d5
1 parent dc7801b
commit 26166d5
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/helm/aqua-app-server/templates/gate-service.yaml b/helm/aqua-app-server/templates/gate-service.yaml
@@ -10,6 +10,10 @@ metadata:
     heritage: "{{ .Release.Service }}"
 spec:
   type: {{ .Values.gate.service.type }}
+  {{- if eq .Values.gate.service.type "LoadBalancer" }}
+  loadBalancerSourceRanges:
+{{ toYaml .Values.gate.service.loadBalancerSourceRanges | indent 4 }}
+  {{- end }}
   selector:
     app: {{ .Release.Name }}-gateway
   ports:

diff --git a/helm/aqua-app-server/values.yaml b/helm/aqua-app-server/values.yaml
@@ -87,6 +87,9 @@ gate:
   service:
     type: ClusterIP
     externalPort: 3622
+    loadBalancerSourceRanges: []
+      # - 10.0.0.0/8
+      # - 172.19.0.0/16 
   publicIP: aqua-gateway
   replicaCount: 1
   ingress: