adrien/ansible-role-k8s-weave
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Add variable for traefik whitelist

Browse source
This commit is contained in:
Adrien Reslinger 2018-10-19 17:00:58 +02:00
parent 85b7239ac7
commit a0d4f0a26d
2 changed files with 8 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
defaults/main.yml
View file

@ -1,4 +1,8 @@
my_context: minikube my_context: flamykubekube
ingress_domain: "local.dataminem.net" ingress_domain: "local.dataminem.net"
#ingress_whitelist:
# - 10.96.0.0/12
# - 10.244.0.0/16
# - 192.168.140.0/24
scope_version: 1.9.1 scope_version: 1.9.1

4
templates/weave_ingress.yaml.j2
View file

@ -6,7 +6,9 @@ metadata:
name: weave name: weave
namespace: weave namespace: weave
annotations: annotations:
# ingress.kubernetes.io/whitelist-source-range: "10.96.0.0/12, 10.244.0.0/16, 192.168.18.0/24" {% if ingress_whitelist is defined %}
ingress.kubernetes.io/whitelist-source-range: "{% for acl_whitelist in ingress_whitelist %}{{ acl_whitelist }}{% if not loop.last %}, {% endif %}{% endfor %}"
{% endif %}
traefik.frontend.priority: "10" traefik.frontend.priority: "10"
spec: spec:
rules: rules: