Add allowedCidrs for loadbalancer ip whitelisting (#141)

azimuth-cloud · Oct 18, 2023 · 36b5f73 · 36b5f73
1 parent 87df524
commit 36b5f73
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/charts/openstack-cluster/templates/cluster-openstack.yaml b/charts/openstack-cluster/templates/cluster-openstack.yaml
@@ -45,6 +45,12 @@ spec:
     enabled: true
   {{- if .loadBalancerProvider }}
     provider: {{ .loadBalancerProvider }}
+    {{- if .allowedCidrs }}
+    allowedCidrs:
+      {{- range .allowedCidrs }}
+      - {{ . }}
+      {{- end}}
+    {{- end }}
   {{- end }}
   {{- end }}
 

diff --git a/charts/openstack-cluster/values.yaml b/charts/openstack-cluster/values.yaml
@@ -101,7 +101,11 @@ apiServer:
   enableLoadBalancer: true
   # Indicates what loadbalancer provider to use. Default is amphora
   loadBalancerProvider:
-
+  # Restrict loadbalancer access to select IPs
+  # allowedCidrs
+  #  - 192.168.0.0/16  # needed for cluster to init
+  #  - 10.10.0.0/16  # IPv4 Internal Network
+  #  - 123.123.123.123 # some other IPs
   # Indicates whether to associate a floating IP with the API server
   associateFloatingIP: true
   # The specific floating IP to associate with the API server