Skip to content

Commit ac83344

Browse files
committed
make api_server_authorized_ip_ranges configurable.
1 parent d79c2d3 commit ac83344

2 files changed

Lines changed: 7 additions & 0 deletions

File tree

main.tf

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,7 @@ resource "azurerm_kubernetes_cluster" "main" {
2626
private_dns_zone_id = var.private_dns_zone_id
2727
private_cluster_public_fqdn_enabled = var.private_cluster_public_fqdn_enabled
2828
local_account_disabled = var.local_account_disabled
29+
api_server_authorized_ip_ranges = var.api_server_authorized_ip_ranges
2930

3031
dynamic "linux_profile" {
3132
for_each = var.admin_username == null ? [] : ["linux_profile"]

variables.tf

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,12 @@ variable "client_secret" {
3838
default = ""
3939
}
4040

41+
variable "api_server_authorized_ip_ranges" {
42+
type = set(string)
43+
description = "(Optional) The IP ranges to allow for incoming traffic to the server nodes."
44+
default = null
45+
}
46+
4147
variable "admin_username" {
4248
default = null
4349
description = "The username of the local administrator to be created on the Kubernetes cluster. Set this variable to `null` to turn off the cluster's `linux_profile`. Changing this forces a new resource to be created."

0 commit comments

Comments
 (0)